CVE-2023-21752

CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...

CVE-2026-119405

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

EUVD-2026-122336

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-119405

A Use after free vulnerability exists in the Windows Backup Engine . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific component or file within the engine is not detailed in the provided documents, the impact is a high-severity elevation of privileg...

Windows Backup Engine Elevation of Privilege Vulnerability

Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-70184

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-62687

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-108135

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

EUVD-2026-100454

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-108135

A vulnerability exists in the Windows Backup Engine due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:...

CVE-2026-70184

The Windows Backup Engine is vulnerable to an Improper Resolution of Path Equivalence (CWE-41) vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH base severity score of 7.8. While the impact involves high confidentiality, int...

EUVD-2026-100129

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

EUVD-2026-99839

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-62687

The Windows Backup Engine is susceptible to an Improper Link Resolution Before File Access (link following) vulnerability. This issue allows an authorized attacker to perform a local information disclosure , potentially accessing sensitive data. No specific exploit details or affected versions ar...

Windows Backup Engine Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Windows Backup Engine Elevation of Privilege Vulnerability

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70184: Windows Backup Engine Elevation of Privilege Vulnerability

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-62687: Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-62687: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...