CVE-2021-26866: Improper Link Resolution Before File Access

Windows Update Service Elevation of Privilege Vulnerability...

CVE-2021-26862: Improper Link Resolution Before File Access

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-26873: Improper Link Resolution Before File Access

Windows User Profile Service Elevation of Privilege Vulnerability...

CVE-2021-26889: Improper Link Resolution Before File Access

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2021-28153: Improper Link Resolution Before File Access

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

CVE-2021-3310: Improper Link Resolution Before File Access

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-24084: Improper Link Resolution Before File Access

Windows Mobile Device Management Information Disclosure Vulnerability...

CVE-2021-21125: Improper Link Resolution Before File Access

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

CVE-2021-21117: Improper Link Resolution Before File Access

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...

CVE-2020-4966: Improper Link Resolution Before File Access

IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to...

CVE-2020-27643: Improper Link Resolution Before File Access

The %PROGRAMDATA%\1E\Client directory in 1E Client 5.0.0.745 and 4.1.0.267 allows remote authenticated users and local users to create and modify files in protected directories where they would not normally have access to create or modify files via the creation of a junction point to a system...

CVE-2020-6015: Improper Link Resolution Before File Access

Check Point Endpoint Security for Windows before E84.10 can reach denial of service during clean install of the client which will prevent the storage of service log files in non-standard locations...

CVE-2020-16007: Improper Link Resolution Before File Access

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

CVE-2020-9901: Improper Link Resolution Before File Access

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8. A local attacker may be able to elevate their privileges...

CVE-2020-6546: Improper Link Resolution Before File Access

Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

CVE-2020-25744: Improper Link Resolution Before File Access

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

CVE-2020-24559: Improper Link Resolution Before File Access

A vulnerability in Trend Micro Apex One, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services on macOS may allow an attacker to manipulate a certain binary to load and run a script from a user-writable folder, which then would allow them to execute arbitrary code as roo...

CVE-2020-6012: Improper Link Resolution Before File Access

ZoneAlarm Anti-Ransomware before version 1.0.713 copies files for the report from a directory with low privileges. A sophisticated timed attacker can replace those files with malicious or linked content, such as exploiting CVE-2020-0896 on unpatched systems or using symbolic links. This allows an...

CVE-2020-13095: Improper Link Resolution Before File Access

Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root...

CVE-2020-2026: Improper Link Resolution Before File Access

A malicious guest compromised before a container creation e.g. a malicious guest image or a guest running multiple containers can trick the kata runtime into mounting the untrusted container filesystem on any host path, potentially allowing for code execution on the host. This issue affects: Kata...