CWE-59
1,842 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
Improper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
CVEs (1,842)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding...Show more |
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) conditi...Show more |
Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location. |
A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in th...Show more |
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
1Microsoft 3Windows 10 1507 Windows Server 2008Windows Server 2012Jun 17, 2026 Dec 12, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability |
1Microsoft 1Azure Connected Machine Agent Jun 17, 2026 Dec 12, 2023 N/A· v4 7.3 HIGH· v3 N/A· v2 Azure Connected Machine Agent Elevation of Privilege Vulnerability |
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link. |
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link. |
Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link. |
1Dell 3Encryption Endpoint Security Suite EnterpriseSecurity Management ServerJun 17, 2026 Nov 16, 2023 N/A· v4 7.3 HIGH· v3 N/A· v2 Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local maliciou...Show more |
Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.
|
1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 moreJun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Installer Elevation of Privilege Vulnerability |
1Microsoft 4Windows 11 21h2 Windows 11 22h2Windows 11 23h2+1 moreJun 17, 2026 Nov 14, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Windows Storage Elevation of Privilege Vulnerability |
1Microsoft 9Windows 10 1507 Windows 10 1607Windows 10 1809+6 moreJun 17, 2026 Nov 14, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Search Service Elevation of Privilege Vulnerability |
1Microsoft 8Windows 10 1809 Windows 10 21h2Windows 10 22h2+5 moreJun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Authentication Elevation of Privilege Vulnerability |
1Microsoft 4Windows 11 21h2 Windows 11 22h2Windows 11 23h2+1 moreJun 17, 2026 Nov 14, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Windows Authentication Denial of Service Vulnerability |
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0.
|
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall. |
HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. Fixed in Vagrant 2.4.0. |