Trend Micro Deep Security Agent File Deletion

The vulnerability of the Trend Micro Deep Security Agent lies in the improper handling of links before accessing a file. Exploiting this vulnerability could allow an attacker to delete any files they desire...

CVE-2021-32549: Improper Link Resolution Before File Access

It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users...

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Input validation

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0094

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

Intel DSA 后置链接漏洞

Intel DSA is a driver update tool. It can detect user drivers, update installed drivers to the latest version, support intel series of graphics cards, audio, network cards and chipset drivers, i card users must have. A backlink vulnerability exists in versions of Intel DSA prior to 20.11.50.9 tha...

CVE-2021-0094: Improper Link Resolution Before File Access

Improper link resolution before file access in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-31187: Improper Link Resolution Before File Access

Windows WalletService Elevation of Privilege Vulnerability...

CVE-2021-30356: Improper Link Resolution Before File Access

A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files...

CVE-2021-28321: Improper Link Resolution Before File Access

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...

CVE-2021-27241: Improper Link Resolution Before File Access

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 Build 20.8.5653.561. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The...

CVE-2021-26866: Improper Link Resolution Before File Access

Windows Update Service Elevation of Privilege Vulnerability...

CVE-2021-26889: Improper Link Resolution Before File Access

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2021-26862: Improper Link Resolution Before File Access

Windows Installer Elevation of Privilege Vulnerability...

CVE-2021-26873: Improper Link Resolution Before File Access

Windows User Profile Service Elevation of Privilege Vulnerability...

CVE-2021-28153: Improper Link Resolution Before File Access

An issue was discovered in GNOME GLib before 2.66.8. When gfilereplace is used with GFILECREATEREPLACEDESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is...

CVE-2021-3310: Improper Link Resolution Before File Access

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

CVE-2021-24084: Improper Link Resolution Before File Access

Windows Mobile Device Management Information Disclosure Vulnerability...

CVE-2021-21117: Improper Link Resolution Before File Access

Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file...