980 matches found
CVE-2025-29795
Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...
CVE-2025-29795: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...
CVE-2025-1683
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links...
CVE-2025-1683
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links...
CVE-2025-1683 Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links...
CVE-2025-1683
CVE-2025-1683 affects the Nomad module of the 1E Client. The vulnerability arises from improper link resolution before file access, allowing a local unprivileged attacker on Windows to delete arbitrary files via symbolic links. Affected scope: 1E Client versions prior to 25.3. Impact is described...
1E Client 安全漏洞
1E Client is an agent-less endpoint management software from 1E Client USA. A security vulnerability exists in 1E Client versions prior to 25.3 that stems from improper link resolution prior to file access, which could allow a local attacker to delete arbitrary files...
CVE-2025-1683: Improper Link Resolution Before File Access
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links...
CVE-2025-25008
Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...
Windows Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...
PT-2025-10843 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...
CVE-2025-25008: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...
PT-2025-12453 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...
CVE-2025-25185: Improper Link Resolution Before File Access
GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then package this soft link file into a tar.gz file and upload it...
Zoom Workplace App for macOS Denial of Service Vulnerability
Zoom Workplace App for macOS is a video conferencing software designed for macOS, aiming to provide a stable and efficient remote collaboration experience. A denial of service vulnerability exists in Zoom Workplace App for macOS, which stems from improper link parsing when the installer handles...
CVE-2020-3432: Improper Link Resolution Before File Access
A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit th...
CVE-2025-21420: Improper Link Resolution Before File Access
Windows Disk Cleanup Tool Elevation of Privilege Vulnerability...