75508 matches found
Microsoft Windows: CVE-2026-83507: Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
CVE-2026-62687: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...
CVE-2026-104816: Improper Neutralization of Input During Web Page Generation
Misskey is an open source, federated social media platform. From 12.0.0 until 2026.7.0, the RSS components display feed item links from configured feeds without verifying their URL schemes. Missing URL scheme verification allows an attacker who controls feed content to provide an unsafe-scheme li...
PT-2026-112508
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendation...
CVE-2026-88191: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-88191: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2026-105460: Out-of-bounds Read
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to...
PT-2026-111639
A flaw was found in BlueZ. An out-of-bounds read vulnerability exists in the btmon Bluetooth monitor tool when processing crafted HCI Return Link Keys events. A maliciously crafted btsnoop capture file can specify a large number of link keys that exceeds the actual packet data, causing btmon to...
CVE-2026-70190
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GNU cpio vulnerabilities (USN-8704-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8704-1 advisory. It was discovered that cpio incorrectly sanitized hard-link targets when extracti...
CVE-2026-85343: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-96911: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83933: Windows Update Orchestrator Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-62687: Windows Backup Engine Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-85849: Windows AppX Deployment Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-85343: Windows Hyper-V Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83927: Windows Registry Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Registry allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83704: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69673: Windows Update Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-69969: Windows AppX Deployment Service Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...