Schneider Electric SESU backend link vulnerability

Schneider Electric SESU is a module for optimizing the efficiency of energy usage from Schneider Electric France. A backlink vulnerability exists in Schneider Electric SESU that stems from improper link resolution and could result in elevation of privilege or denial of service...

CVE-2025-43490: Improper Link Resolution Before File Access

A potential security vulnerability has been identified in the HPAudioAnalytics service included in the HP Hotkey Support software, which might allow escalation of privilege. HP is releasing software updates to mitigate the potential vulnerability...

CVE-2025-55188: Improper Link Resolution Before File Access

7-Zip before 25.01 does not always properly handle symbolic links during extraction...

Linux Distros Unpatched Vulnerability : CVE-2025-4211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Link Resolution Before File Access 'Link Following' vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows...

CVE-2025-36611

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-36611

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-36611

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-36611: Improper Link Resolution Before File Access

Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...

CVE-2025-43252: Improper Link Resolution Before File Access

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A website may be able to access sensitive user data when resolving symlinks...

CVE-2025-43220: Improper Link Resolution Before File Access

This issue was addressed with improved validation of symlinks. This issue is fixed in iPadOS 17.7.9, macOS Sequoia 15.6, macOS Sonoma 14.7.7, macOS Ventura 13.7.7. An app may be able to access protected user data...

PT-2025-31398 · Dell · Dell Security Management Server +1

Name of the Vulnerable Software and Affected Versions: Dell Encryption and Dell Security Management Server versions prior to 11.11.0 Description: Dell Encryption and Dell Security Management Server are affected by an Improper Link Resolution Before File Access 'Link Following' issue. A local...

Security Updates for Microsoft Visual Studio Products (July 2025)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities. - Vulnerability in Gitk where when a user clones an untrusted repository and runs Gitk without additional command arguments, any writable file can be created and truncated. T...

CVE-2025-21195

Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...

CVE-2025-49680

Improper link resolution before file access 'link following' in Windows Performance Recorder allows an authorized attacker to deny service locally...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-48820

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-49739

Improper link resolution before file access 'link following' in Visual Studio allows an unauthorized attacker to elevate privileges over a network...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49738

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2025-49739

Improper link resolution before file access 'link following' in Visual Studio allows an unauthorized attacker to elevate privileges over a network...