75486 matches found
EUVD-2026-99699
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70165
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70165
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
CVE-2026-70165
The .NET runtime is vulnerable to an improper link resolution before file access (link following) issue. This flaw allows an authorized attacker to achieve local privilege escalation on the affected system. The vulnerability is categorized as a MEDIUM severity issue with a CVSS score of 6.70 . No...
CVE-2026-70190
.NET contains an improper link resolution before file access (link following) vulnerability, identified as CVE-2026-70190 . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is part of the Microsoft Developer Tools suite. Official metrics indicate a...
CVE-2026-85849
The Windows AppX Deployment Service is vulnerable to an elevation of privilege flaw caused by improper link resolution before file access (link following). This vulnerability allows an authorized attacker to perform local privilege escalation. The CVSS v3.1 score is 7.8 , reflecting high impact o...
CVE-2026-85343
Windows Hyper-V is affected by an Improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local privilege escalation . No specific software versions or exploit links are provided in the documents, but the vulnerability has a...
CVE-2026-83927
The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...
CVE-2026-83793
A vulnerability in the Windows Update Orchestrator Service involves improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. N...
CVE-2026-83704
The Microsoft Windows Search Component is vulnerable to an elevation of privilege vulnerability due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to elevate privileges locally. While the documents confirm the vulnerability and its im...
CVE-2026-69673
A vulnerability exists in Windows Update due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local elevation of privilege attack. The vulnerability is associated with CWE-59 . No specific exploit details or links are provided i...
CVE-2026-69969
The Windows AppX Deployment Service is vulnerable to an information disclosure vulnerability (CVE-2026-69969) due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to disclose information locally. Exploitation details and specific remedi...
CVE-2026-110234
The software Elio (versions through 1.13.0 ) is vulnerable to an insecure temporary file creation (CWE-377) in the external preview command capture. A local attacker who knows the victim's Elio process ID can pre-create a symbolic link at a predictable capture path. When the victim previews media...
CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture
Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...
CVE-2026-110234 Elio through 1.13.0 Insecure Temporary File Creation in External Preview Command Capture
Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...
CVE-2026-104816
The open source federated social media platform Misskey is vulnerable to Cross-site Scripting (XSS) in its RSS components. Specifically, versions 12.0.0 through 2026.7.0 fail to verify URL schemes for feed item links. An attacker who controls feed content can provide an unsafe-scheme link , leadi...
CVE-2026-104816 Misskey: Cross-site scripting in RSS feed item links
Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme li...
