Lucene search
K

570 matches found

CVE
CVE
added 2025/03/11 4:59 p.m.115 views

CVE-2025-25008

CVE-2025-25008 describes an elevation-of-privilege in Windows due to improper link resolution before file access (link following). An authorized, local attacker could exploit this to gain higher privileges. CVSSv3.1 base score is 7.1 (High); attack vector LOCAL; privileges required LOW; user inte...

7.1CVSS6.8AI score0.0056EPSS
Exploits0References1Affected Software5
Microsoft CVE
Microsoft CVE
added 2025/03/11 7:0 a.m.18 views

Windows Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...

7.1CVSS6.9AI score0.0056EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/03/11 12:0 a.m.2 views

PT-2025-10843 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

7.1CVSS8.3AI score0.0056EPSS
Exploits0References13
Positive Technologies
Positive Technologies
added 2025/03/11 12:0 a.m.1 views

PT-2025-12453 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

7.8CVSS6AI score0.00343EPSS
Exploits0References13
RedhatCVE
RedhatCVE
added 2025/02/05 7:40 a.m.4 views

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

7.1CVSS6.9AI score0.00474EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/02/04 9:6 p.m.17 views

Security Bulletin: Vulnerabilities in OpenPrinting affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary Potential vulnerability in OpenPrinting has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. These vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-35235 DESCRIPTION: OpenPrinting CUPS coul...

9.8CVSS8.2AI score0.8344EPSS
Exploits18Affected Software1
CNVD
CNVD
added 2024/12/25 12:0 a.m.1 views

Dell Inventory Collector Incorrect Link Resolution Before File Access Vulnerability

Dell Inventory Collector is a tool provided by Dell for collecting device information, mainly used to collect system information such as hardware configuration, operating system version, service packs, and so on from client systems. Dell Inventory Collector suffers from an incorrect link resoluti...

7.8CVSS6.9AI score0.00189EPSS
Exploits0References1
CNVD
CNVD
added 2024/12/20 12:0 a.m.2 views

Dell Client Platform Incorrect Link Resolution Vulnerability

Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...

6.7CVSS6.9AI score0.00171EPSS
Exploits0References1
OSV
OSV
added 2024/12/18 3:15 a.m.2 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS5.8AI score0.00189EPSS
Exploits0References1
NVD
NVD
added 2024/12/18 3:15 a.m.16 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS0.00189EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 1:5 a.m.11 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS6.7AI score0.00189EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/18 1:5 a.m.17 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS0.00189EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.1 views

Dell Inventory Collector 安全漏洞

Dell Inventory Collector is a tool provided by Dell for collecting device information, mainly used to collect system information such as hardware configuration, operating system version, service packs, and so on from client systems. Dell Inventory Collector suffers from an incorrect link resoluti...

7.8CVSS6.8AI score0.00189EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.1 views

PT-2024-32630 · Dell · Dell Inventory Collector Client

Name of the Vulnerable Software and Affected Versions: Dell Inventory Collector Client versions prior to 12.7.0 Description: The issue concerns an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially...

7.8CVSS7AI score0.00189EPSS
Exploits0References9
OSV
OSV
added 2024/12/11 8:15 a.m.1 views

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

6.7CVSS5.8AI score0.00171EPSS
Exploits0References1
NVD
NVD
added 2024/12/11 8:15 a.m.17 views

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

6.7CVSS0.00171EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/11 7:26 a.m.10 views

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

6.3CVSS6.5AI score0.00171EPSS
Exploits0References1
CVE
CVE
added 2024/12/11 7:26 a.m.54 views

CVE-2024-52537

CVE-2024-52537 affects Dell Client Platform Firmware Update Utility (Dell Client Platform). The vulnerability is described as an Improper Link Resolution issue in the updater, with a local attacker using high privileges to achieve Elevation of Privileges . Several connected sources corroborate: D...

6.7CVSS6.5AI score0.00171EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/11 7:26 a.m.17 views

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

6.3CVSS0.00171EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/11 12:0 a.m.3 views

PT-2024-35364 · Dell · Dell Client Platform Firmware Update Utility

Name of the Vulnerable Software and Affected Versions: Dell Client Platform Firmware Update Utility affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this...

6.7CVSS6.5AI score0.00171EPSS
Exploits0References6
Rows per page
Query Builder