Windows User Profile Service Elevation of Privilege Vulnerability

A flaw in Windows User Profile Service allows an attacker with local access to gain higher privileges than they should have. This is dangerous because it gives attackers admin-level control over the system.

A race condition (CWE-362) in the Windows User Profile Service permits privilege escalation through timing-based exploitation during profile operations. An attacker with local access can exploit the window between service operations to elevate privileges to SYSTEM level.