637 matches found
EUVD-2026-73438
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
CVE-2026-83999
Windows Resilient File System (ReFS) Deduplication Service is affected by an improper link resolution before file access (link following) flaw that allows an authorized local attacker to elevate privileges. The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a local attack vector, hig...
EUVD-2026-73362
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73081
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-70563
CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...
CVE-2026-69771
CVE-2026-69771 is a security feature bypass in the Windows Container Manager Service , caused by improper link resolution before file access (link following). A local, authorized attacker with low privileges can exploit this to gain high confidentiality impact , with no stated integrity or availa...
EUVD-2026-73064
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-69379
CVE-2026-69379 is a link following vulnerability (improper link resolution before file access) in Windows NTFS that allows a local, authorized attacker to escalate privileges . The vulnerability is classified as HIGH severity (CVSS 3.1 base score 7.0) with high impact on confidentiality, integrit...
EUVD-2026-73236
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2026-68830
CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...
EUVD-2026-73192
Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...
EUVD-2026-73180
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67368
Microsoft SQL Server is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker to elevate privileges over a network. The root cause is a link following issue in how SQL Server resolves file links prior to access. Per the assigned CVSS...
CVE-2024-21111
CVE-2024-21111 Oracle VirtualBox anterior a 7.0.16 es vulnerable a una escalada de privilegios local mediante el seguimiento de enlaces simbólicos que conduce a la eliminación arbitraria de archivos y al movimiento arbitrario de archivos. VirtualBox intenta mover archivos de registro como NT...
Microsoft SQL Server Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
Windows NTFS Tampering Vulnerability
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...
Windows Shell Spoofing Vulnerability
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...