379 matches found
Holistic-Deconstruction-of-CVE-2019-5736-
= doi.org/10.5281/zenodo.18304765 = orcid.org/0009-0007-7728-256X README.md 💀 CVE-2019-5736: runc Container Breakout Deconstruction Advanced Purple Teaming & Forensic Analysis of Host Root Escape 🛡️ Overview This repository contains a high-fidelity deconstruction and Proof-of-Concept PoC for...
CVE-2026-78622
Okta Verify for Windows uninstaller is vulnerable to improper link resolution . The uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive ...
CVE-2026-78622 Improper Link Resolution in Okta Verify for Windows Uninstaller Data Removal
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
CVE-2026-70563
CVE-2026-70563 is an improper link resolution before file access ("link following") vulnerability in Windows Shell that allows an unauthorized attacker to perform spoofing over a network . The assigned CVSS 3.1 score is 8.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating h...
EUVD-2026-73064
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...
Windows NTFS Tampering Vulnerability
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...
CVE-2026-19820
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
EUVD-2026-68916
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
CVE-2026-19820 Backblaze Client for Windows Improper Link Resolution Vulnerability
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
CVE-2026-19820
CVE-2026-19820 affects the Backblaze Client for Windows . The root cause is improper link resolution : a local user can create a link from Backblaze's folder to Windows OS system files during a backup, potentially rendering the system not bootable . Successful exploitation requires an administrat...
PT-2026-84060
Name of the Vulnerable Software and Affected Versions Backblaze Client affected versions not specified Description An issue exists where a local user can render a system unbootable by creating a link from the Backblaze folder to Windows OS system files during a backup process. This occurs due to...
EUVD-2026-65091
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-63693
Dell Client BIOS contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Write...
CVE-2026-65680
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
EUVD-2026-56826
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
EUVD-2026-56678
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
Windows User Profile Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-20313
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-20310
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...