CVE-2020-0989: Missing Authorization

An information disclosure vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions. An attacker who successfully exploited this vulnerability could bypass access restrictions to read files. To exploit this vulnerability, an attacker would first have ...

Design/Logic Flaw

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as...

CVE-2020-24955

CVE-2020-24955 affects SUPERAntiSpyware Professional X Trial

PT-2020-15868

Name of the Vulnerable Software and Affected Versions SUPERAntiSpyware Professional X Trial version 10.0.1206 Description The issue allows local privilege escalation by permitting unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction...

CVE-2020-24955: Improper Link Resolution Before File Access

SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as...

PT-2020-6160

Name of the Vulnerable Software and Affected Versions McAfee Total Protection versions prior to 16.0.29 Description The issue is related to a lack of proper access control in McAfee Total Protection, allowing local users to elevate their privileges. This can be achieved through careful manipulati...

CVE-2020-1565

An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate...

Microsoft Windows Print Spooler Directory Junction Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Print Spooler...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

CVE-2020-1337 CVE-2020-1337 is a bypass of PrintDemon...

PT-2020-3976 · Microsoft · Windows Mdm Diagnostics +1

Name of the Vulnerable Software and Affected Versions: Windows Mobile Device Management MDM Diagnostics affected versions not specified Description: An information disclosure issue exists due to improper handling of junctions by Windows MDM Diagnostics, allowing an attacker to bypass access...

CVE-2020-1405

An elevation of privilege vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1372...

CVE-2020-1330

An information disclosure vulnerability exists when Windows Mobile Device Management MDM Diagnostics improperly handles junctions, aka 'Windows Mobile Device Management Diagnostics Information Disclosure Vulnerability'...

CVE-2020-15401

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

CVE-2020-15401

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

Arbitrary file deletion

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

CVE-2020-15401

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

CVE-2020-15401

CVE-2020-15401 affects IOBit Malware Fighter Pro 8.0.2.547. A local attacker can gain privileges to delete files by manipulating malicious flagged file locations using an NTFS junction and an Object Manager symbolic link. The issue is described across multiple sources (CVE records and CNVD/PRION ...

CVE-2020-15401: Improper Link Resolution Before File Access

IOBit Malware Fighter Pro 8.0.2.547 allows local users to gain privileges for file deletion by manipulating malicious flagged file locations with an NTFS junction and an Object Manager symbolic link...

PT-2020-14411

Name of the Vulnerable Software and Affected Versions IOBit Malware Fighter Pro version 8.0.2.547 Description The issue allows local users to gain privileges for file deletion by manipulating malicious flagged file locations. This is achieved through the use of an NTFS junction and an Object...

CVE-2020-14990

IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link...