| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Truecrypt 7 / VeraCrypt 1.13 - Drive Letter Symbolic Link Creation Privilege Escalation Exploit | 5 Oct 201500:00 | – | zdt |
 | CVE-2015-7358 | 5 Oct 201500:00 | – | circl |
 | TrueCrypt Local Elevation of Privilege Vulnerability | 10 Oct 201500:00 | – | cnvd |
 | CVE-2015-7358 | 2 Oct 201719:00 | – | cvelist |
 | TrueCrypt 7 / VeraCrypt 1.13 - Drive Letter Symbolic Link Creation Privilege Escalation | 5 Oct 201500:00 | – | exploitdb |
 | EUVD-2015-7282 | 7 Oct 202500:30 | – | euvd |
 | CVE-2015-7358 | 3 Oct 201701:29 | – | nvd |
 | cve.space XSS vulnerability | 29 Sep 201520:42 | – | openbugbounty |
 | Directory traversal | 3 Oct 201701:29 | – | prion |
 | PT-2017-7199 | 2 Oct 201700:00 | – | ptsecurity |
10
Node
AND
OR
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| X: | path | \\DosDevices\X: | Drive letter availability check bypass by crafting a drive-letter symbolic link via ZwOpenSymbolicLinkObject on \\DosDevices\\X:, enabling mounting over an existing drive letter. | CWE-264 |
| C: | path | \\GLOBAL??\\C: | Remapping the system drive by manipulating the global drive-name symbolic link at \\GLOBAL?? to point to a VeraCrypt volume. | CWE-264 |
| C: | path | \\Sessions\\0\\DosDevices | Per-user drive letter mapping location used to bypass per-user checks; part of the attack chain involving terminal services and device map manipulation. | CWE-264 |
| X: | path | \\Sessions\\0\\DosDevices | Per-user drive letter mapping location used to bypass per-user checks; part of the attack chain involving terminal services and device map manipulation. | CWE-264 |
| C: | path | \\GLOBAL??\\C: | Final stage: after remapping, the global drive-name directory is used as the process device map to give control over the C: drive. | CWE-264 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 00:32Current
7.6High risk
Vulners AI Score7.6
CVSS 27.2
CVSS 37.8
EPSS0.01205