Researchers warn that CVE-2021-34484 can be exploited with a patch bypass for a bug originally addressed in August by Microsoft. The bug affects Windows 10 (both 32 and 64 bit), versions v21H1, v20H2, v2004 and v1909; and Windows Server 2019 64 bit. Microsoft hasnt released an official patch for the bug, but an unofficial micropatch from oPatch has hit the scene. The vulnerability lies in the User Profile Service, specifically in the code responsible for creating a temporary user profile folder in case the users original profile folder is damaged or locked.”]
Source: https://threatpost.com/windows-10-privilege-escalation-zero-day-unofficial-fix/176313/

