74732 matches found
EUVD-2026-73064
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...
CVE-2026-69771
CVE-2026-69771 is a security feature bypass in the Windows Container Manager Service , caused by improper link resolution before file access (link following). A local, authorized attacker with low privileges can exploit this to gain high confidentiality impact , with no stated integrity or availa...
CVE-2026-69379
CVE-2026-69379 is a link following vulnerability (improper link resolution before file access) in Windows NTFS that allows a local, authorized attacker to escalate privileges . The vulnerability is classified as HIGH severity (CVSS 3.1 base score 7.0) with high impact on confidentiality, integrit...
EUVD-2026-73236
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...
EUVD-2026-73192
Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...
CVE-2026-68830
CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...
EUVD-2026-73180
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-67368
Microsoft SQL Server is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker to elevate privileges over a network. The root cause is a link following issue in how SQL Server resolves file links prior to access. Per the assigned CVSS...
Exploit for CVE-2026-73320
CVE-2026-73320 XenForo before 2.3.13 exposes pending rich-lin...
python: Python tarfile module: File modification and content disclosure via crafted archives
A flaw was found in Python's tarfile module. This module's data and tar extraction filters are vulnerable to specially crafted archives containing a hard link to a symbolic link. An attacker could exploit this by providing a malicious archive. This could lead to unauthorized modification of file...
Windows Compressed Folder Information Disclosure Vulnerability
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
Windows Container Manager Service Security Feature Bypass Vulnerability
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...
Windows Shell Spoofing Vulnerability
Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...
Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
Windows NTFS Tampering Vulnerability
Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...
Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...