CVE-2026-69425

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

CVE-2026-69289

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-70563

CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...

EUVD-2026-73064

Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-69379

CVE-2026-69379 is a link following vulnerability (improper link resolution before file access) in Windows NTFS that allows a local, authorized attacker to escalate privileges . The vulnerability is classified as HIGH severity (CVSS 3.1 base score 7.0) with high impact on confidentiality, integrit...

Windows NTFS Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

PT-2026-87708

Name of the Vulnerable Software and Affected Versions Windows Container Manager Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to locally bypass a security feature. Recommendations At the...

CVE-2026-69771: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-69289: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-69425: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

PT-2026-87223

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-78622: Improper Link Resolution Before File Access

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...

CVE-2026-70563: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-68830: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-86469: Improper Link Resolution Before File Access

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

CVE-2026-85092: Improper Link Resolution Before File Access

LiME through 1.12.0 fails to validate the disk acquisition output path and does not use ONOFOLLOW when opening the operator-supplied path parameter, allowing unprivileged local users to overwrite arbitrary root-owned files. An attacker who controls the output directory can create a symbolic link...

CVE-2026-19820

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

EUVD-2026-68916

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...