1303 matches found
CVE-2025-43448: Improper Link Resolution Before File Access
This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1, tvOS 26.1, visionOS 26.1, watchOS 26.1. An app may be able to break out of its sandbox...
CVE-2025-43394: Improper Link Resolution Before File Access
This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 14.8.2, macOS Tahoe 26.1. An app may be able to access protected user data...
CVE-2025-12341: Improper Link Resolution Before File Access
A vulnerability was detected in ermig1979 AntiDupl up to 2.3.12. Impacted is an unknown function of the file AntiDupl.NET.WinForms.exe of the component Delete Duplicate Image Handler. The manipulation results in link following. The attack is only possible with local access. The vendor was contact...
BIT-DOTNET-2025-55247 .NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Podman File Access Link DoS
The vulnerability of the Podman software for managing and starting OCI containers is related to improper permission handling before accessing the file. Exploiting this vulnerability can allow an attacker to cause service failures...
CVE-2025-26625: Improper Link Resolution Before File Access
Git LFS is a Git extension for versioning large files. In Git LFS versions 0.5.2 through 3.7.0, when populating a Git repository's working tree with the contents of Git LFS objects, certain Git LFS commands may write to files visible outside the current Git working tree if symbolic or hard links...
CVE-2025-59241
Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...
EUVD-2025-34277
Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...
CVE-2025-59281
Improper link resolution before file access 'link following' in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
CVE-2025-55247
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
.NET Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Windows Health and Optimized Experiences Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...
PT-2025-42008
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists in .NET where improper link resolution before file access, also known as 'link following', can allow an authorized attacker to elevate privileges locally. This occurs due to the...
CVE-2025-59241: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...
CVE-2025-55247: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
PT-2025-42124
Name of the Vulnerable Software and Affected Versions Windows Health and Optimized Experiences Service affected versions not specified Description An issue exists in Windows Health and Optimized Experiences Service related to improper link resolution before file access, also known as 'link...
CVE-2025-62363: Improper Link Resolution Before File Access
yt-grabber-tui is a terminal user interface application for downloading videos. In versions before 1.0-rc, the application allows users to configure the path to the yt-dlp executable via the pathtoytdlp configuration setting. An attacker with write access to the configuration file or the filesyst...
EUVD-2025-32891
Improper Link Resolution Before File Access in the AWS VPN Client for macOS versions 1.3.2- 5.2.0 allows a local user to execute code with elevated privileges. Insufficient validation checks on the log destination directory during log rotation could allow a non-administrator user to create a...