Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2022-26904

Your trail

Where next?

Selected cve

CVE-2022-26904

Windows User Profile Service Elevation of Privilege Vulnerability

46 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority71.2–77.0

Coverage91.2%

Connections43

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 43

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2022

419e0f27-5254-4329-813a-c89e71e97e68

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 20H2

4cd0fb8b-999b-4bea-b649-d6f3ba5041ed

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 21H1

1aeb64fb-0346-4b70-a1dc-de8e641e8035

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2016

fbcf8d33-25b6-4a4f-86df-f38f02f56ddf

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2008 Service Pack 2 (Server Core installation)

241e86bc-6959-442a-bfc0-8ab811d2ae82

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 8.1

63a2b94f-5c70-40bc-90e7-9ece8dbb21ca

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 7

d27c6737-ac38-4be4-bd08-1877fdb5b3d6

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2008 Service Pack 2

e9f4b225-582d-4983-a4cf-d21c22f13252

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2008 R2 Service Pack 1

2d673c86-7465-474a-b74b-443264a4d661

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2012

1a5951f6-441b-4187-8c76-4915f409bdf3

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2008 Service Pack 2

c7a35ea7-5d9c-47b9-965c-a33b82a85cc8

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2012 (Server Core installation)

103792f4-5f59-443e-a349-9bd284c38ad0

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server version 20H2

729f1996-1e28-447f-999c-c6a176a03a0a

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2016 (Server Core installation)

8ac95c7c-f21b-43ef-afb8-bf833d131985

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2012 R2 (Server Core installation)

b2668e1e-ac6e-4c32-adaa-8f375e07b50f

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 1909

42a2805e-edfd-427b-99ce-4540d4f73181

has cited scope2 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 1809

7cc9c130-8945-4e77-98c2-f464b143812b9ce6cd03-d647-4265-b976-372e5be45da2

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 7 Service Pack 1

af1a49bd-d12a-4b9a-b453-ff0bc751e352

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2008 R2 Service Pack 1 (Server Core installation)

09efee37-b3f1-47ae-863b-bda95aeeb645

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 1507

b0f15ade-bb30-49f4-b2d4-0e509ffb53d8

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 21H2

20bff3e0-dbfb-4505-bec4-042f9b97738d

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 11 version 21H2

c75718b5-db14-407c-9f62-80c4e306ee6b

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2019

fd97fad8-4c66-49bd-bb23-a02a2b3cbeda

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows 10 Version 1607

9393d2d3-a9c5-49fd-9f60-86b3de39d31b

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2012 R2

37b5f550-9e0c-4fbf-bcd6-1e72e0599f9c

has cited scope1 retained · stored CVE-2022-26904 → Microsoft · Windows Server 2019 (Server Core installation)

9a2a6e4c-1eb4-4a70-8dd3-378362cba909

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_server_2016

5b7114ed-864e-4eac-ae54-4d3f378433b8

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_rt_8.1

ae24692b-621b-4490-a5aa-11825da4cea7

has vulnerable target scope2 retained · stored CVE-2022-26904 → microsoft · windows_server_2008

080bcee1-2d88-470e-8b1e-ab56c775b3b6d3cd3f64-2ade-4965-a545-984fc350144a

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_server_2019

232b52fd-b688-4b6f-8728-8813c76eb83c

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_server_20h2

aaf6beb4-caaf-4d41-a95d-f4b7656de7d7

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_20h2

dfb28f4f-095b-4967-9b72-1fd133ed7ef2

has vulnerable target scope2 retained · stored CVE-2022-26904 → microsoft · windows_server_2012

20c18647-cc5e-424f-8747-98e19283ddb37caf1509-cf38-43a3-8a0e-e0cda676874f

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_1607

4f8403a8-baca-4504-99c1-027cda6753e4

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_8.1

8792caf5-32b2-45ae-a08e-015184de6f6e

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_11_21h2

8869e16c-1ba8-46bf-b956-74785b1bc58f

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_1507

89e1af77-1da7-4f39-866a-4ff95112822d

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_1809

dc9fd771-91f5-45ea-b41b-732b7d844709

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_server_2022

1fe3336a-4907-4475-b5d7-c8e44af77f97

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_21h1

58d9eac6-fe2e-4930-a1fc-122572dfda4f

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_21h2

b887df6e-cf2c-478b-abe5-d1c824053b50

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_10_1909

25bab83d-81bb-4abc-895d-11318f7b158e

has vulnerable target scope1 retained · stored CVE-2022-26904 → microsoft · windows_7

553e6ee7-4a20-4a5f-86e0-6b3e15cb11cf

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Aug 27, 2026, 6:09 PM UTC · 44 entities · 43 relationships · bounded complete