Vulnerability intelligence

CVE-2026-62832

Microsoft Windows 10 Version 21H2 CWE-59

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

CVSS Score

7.8

High

EPSS — Exploit Probability

3.3%

Riskier than 88% of all CVEs · checked 2026-09-24

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

6 articles across 6 outlets · first covered Aug 11, 2026 · latest Aug 12, 2026

Associated threat actors

Lazarus Group

Coverage timeline

MS Patch Tuesday patches 421 flaws, Lazarus zero day exploited
www.malwarebytes.com · Aug 12, 2026
Microsoft Fixes 400 Flaws on August Patch Tuesday
www.infosecurity-magazine.com · Aug 12, 2026
Microsoft Patch Tuesday Patches Critical WinSock Exploit
securityonline.info · Aug 12, 2026
Microsoft Fixes 421 Flaws Including SharePoint Zero Day
www.rapid7.com · Aug 12, 2026
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
isc.sans.edu · Aug 11, 2026
Microsoft Patch Tuesday Fixes Zero Day Winsock Flaw CVE-2026-68820
www.securityweek.com · Aug 11, 2026

Related CVEs — Microsoft

CVE-2026-65660KEV CVE-2026-85880KEV CVE-2025-32711 CVE-2019-0708KEV CVE-2020-0688KEV CVE-2026-85921 CVE-2026-55945 CVE-2026-62721