CVE-2025-49680

CVE-2025-49680 affects the Windows Performance Recorder component. Root cause: improper link resolution before file access ("link following"). Impact: local Denial-of-Service by an authenticated user. Public details in connected documents confirm the vulnerability type and affected component, wit...

CVE-2025-21195

CVE-2025-21195 refers to an elevation-of-privilege flaw in Azure Service Fabric Runtime caused by improper link resolution before file access (link following). The vulnerability enables a locally authenticated attacker to elevate privileges on affected Service Fabric components. Connected sources...

Description of the security update for Office 2016: July 8, 2025 (KB5002742)

None None...

Windows Update Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Service allows an authorized attacker to elevate privileges locally...

Azure Service Fabric Runtime Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...

Visual Studio Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Visual Studio allows an unauthorized attacker to elevate privileges over a network...

Windows Performance Recorder (WPR) Denial of Service Vulnerability

Improper link resolution before file access 'link following' in Windows Performance Recorder allows an authorized attacker to deny service locally...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Windows AppX Deployment Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-38236

In the Linux kernel, the following vulnerability has been resolved: afunix: Don't leave consecutive consumed OOB skbs. Jann Horn reported a use-after-free in unixstreamreadgeneric. The following sequences reproduce the issue: $ python3 from socket import s1, s2 = socketpairAFUNIX, SOCKSTREAM...

Git: Multiple Vulnerabilities

Background Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Description Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details...

CVE-2025-41668: Improper Link Resolution Before File Access

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

PT-2025-28504 · Microsoft · Service Fabric

Name of the Vulnerable Software and Affected Versions: Service Fabric affected versions not specified Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. This could...

PT-2025-28551 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Service affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in the Windows AppX Deployment Service. This allows an authorize...

CVE-2025-48820: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-49738: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

PT-2025-28578 · Microsoft · Windows Performance Recorder +1

Name of the Vulnerable Software and Affected Versions: Windows Performance Recorder affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Performance Recorder. This allows an authorized attacker...

CVE-2025-49680: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Performance Recorder allows an authorized attacker to deny service locally...

CVE-2025-41667: Improper Link Resolution Before File Access

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

PT-2025-28625

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an unauthorized attacker to elevate privileges over a network...