1020 matches found
CVE-2025-47181
CVE-2025-47181 Concept: Microsoft Edge Link Following Privilege Escalation Project Overview This repository presents the CVE-2025-47181 Concept , a Python program designed to illustrate the mechanism and impact of CVE-2025-47181. This is a Privilege Escalation vulnerability in Microsoft Edge...
CVE-2025-21420_POC
Diffing cleanmgr.exe The new version of cleanmgr.exe includes a call to the SetProcessMitigationPolicy function. With MitigationPolicy set to 16, corresponding to ProcessRedirectionTrustPolicy. Combined with Microsoft's description of CWE-59: Improper Link Resolution Before File Access 'Link...
CVE-2026-41091-PoC-Exploit
CVE-2026-41091 - RedSun SolarFlare - Microsoft Defender LPE Exploit Legal Disclaimer & Responsible Use This tool is provided for educational and authorized penetration testing purposes only. The authors and contributors are not responsible for any misuse or damage caused by this software. Users a...
CVE-2026-53882
An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...
EUVD-2026-101982
An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...
CVE-2026-0827
CVE-2026-0827 The LdeApi.Server.exe process attempts to write MP27AM7Westimation.json to C:\ProgramData\Lenovo\LDE\SYSTEM without impersonation. This directory does not exist by default. Since C:\ProgramData\ allows standard users to create subdirectories, a low-privileged user can create this pa...
Security Bulletin: Cargo in IBM Open SDK for Rust on AIX uses a vulnerable version of gix crates
Summary Vulnerabilites were discovered in the gix family of crates used by the cargo package manager in IBM Open SDK for Rust on AIX 1.94.0.1 and 1.96.0.0. Vulnerability Details CVEID:CVE-2026-82248 DESCRIPTION: gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the...
CVE-2026-97790
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-96911
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-96243
Improper link resolution before file access 'link following' in Windows WalletService allows an authorized attacker to elevate privileges locally...
CVE-2026-96225
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-96231
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-88191
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-85849
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85343
Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-83933
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
CVE-2026-83927
Improper link resolution before file access 'link following' in Windows Registry allows an authorized attacker to elevate privileges locally...
CVE-2026-83793
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...