PT-2026-88102

Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description An improper link resolution before file access, known as link following, occurs within the Windows Update Stack. This issue allows an authorized attacker to elevate their...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

CVE-2026-69732: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

PT-2026-87268

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to disclose information locally. This issue...

CVE-2026-70019: Windows Hard Link

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

CVE-2026-83999: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

CVE-2026-86510: Out-of-bounds Write

A vulnerability has been found in D-Link DIR-822A A101. Affected is the function tunnelsetparams of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2026-67368: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

The vulnerability of the /cgi/file_sharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software allows a hacker to execute arbitrary commands.

The vulnerability of the /cgi/filesharing.cgi file of the File Sharing component of the D-Link DNS-320 networking storage software is related to the lack of data cleaning measures at the management level. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary...

PT-2026-88087

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...

CVE-2026-86509: Stack-based Buffer Overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

PT-2026-88144

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

PT-2026-87801

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

PT-2026-87787

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

PT-2026-87708

Name of the Vulnerable Software and Affected Versions Windows Container Manager Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to locally bypass a security feature. Recommendations At the...

PT-2026-87417

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. This issue involves a Time-of-Check to Time-of-Use...

PT-2026-87456

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This issue occurs when the system does not correctly...

PT-2026-87223

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-88425

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:ProgramDataMaono'. Fixed in 4.0.80...

CVE-2026-69425: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...