40 matches found
CVE-2026-56796: Improper Link Resolution Before File Access
Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-20310
Cisco Catalyst SD-WAN software contains CVE-2026-20310 addressing improper link resolution before file access (CWE-59). Affected component: Cisco Catalyst SD-WAN software; root cause: improper link resolution before file access. Impact per CVSS: Critical (9.1) with high confidentiality, integrity...
dotnet: .NET: Local tampering via improper link resolution
A flaw was found in .NET. This vulnerability, stemming from improper link resolution before file access, allows an authorized local attacker to perform tampering. This could lead to unauthorized modification of data or system files...
CVE-2026-44274: Improper Link Resolution Before File Access
Dell Wyse Management Suite WMS, versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-44275: Improper Link Resolution Before File Access
Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary File Write...
CVE-2025-63946: Improper Link Resolution Before File Access
A privilege escalation PE vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition...
CVE-2025-15328
Tanium addressed an improper link resolution before file access vulnerability in Enforce...
CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce.
Tanium addressed an improper link resolution before file access vulnerability in Enforce...
EUVD-2025-206835
Tanium addressed an improper link resolution before file access vulnerability in Enforce...
CVE-2025-15328
CVE-2025-15328 describes an improper link resolution before file access in Tanium Enforce. Documents indicate Tanium addressed the issue, but provide no explicit affected versions, patch version, or detailed root cause beyond the general flaw. The PT-Security entry warns of potential unauthorized...
Siemens SIMATIC S7-1500 Improper Link Resolution Before File Access (CVE-2021-28153)
An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft AutoUpdate MAU allows an authorized attacker to elevate privileges locally...
CVE-2025-43726: Improper Link Resolution Before File Access
Dell Alienware Command Center 5.x AWCC, versions prior to 5.10.2.0, contains an Improper Link Resolution Before File Access 'Link Following'" vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2025-36611: Improper Link Resolution Before File Access
Dell Encryption and Dell Security Management Server, versions prior to 11.11.0, contain an Improper Link Resolution Before File Access 'Link Following' Vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...
The vulnerability of the VsapiNT.sys module in anti-virus software from Trend Micro’s Apex One and Apex One as a Service allows a malicious actor to elevate their privileges and execute arbitrary code within the SYSTEM context.
The vulnerability of the VsapiNT.sys module in anti-virus software from Trend Micro’s Apex One and Apex One as a Service is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitra...
CVE-2025-1697: Improper Link Resolution Before File Access
A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. HP is providing software updates to mitigate this potential...
CVE-2025-25008
Improper link resolution before file access 'link following' in Microsoft Windows allows an authorized attacker to elevate privileges locally...
Dell Inventory Collector Incorrect Link Resolution Before File Access Vulnerability
Dell Inventory Collector is a tool provided by Dell for collecting device information, mainly used to collect system information such as hardware configuration, operating system version, service packs, and so on from client systems. Dell Inventory Collector suffers from an incorrect link resoluti...
CVE-2024-47480: UNIX Symbolic Link (Symlink) Following
Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...