Windows Projected File System Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Windows Backup Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

.NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-58102

creationtimestamp| type| source ---|---|--- 2026-07-14 13:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmdnba5iy2w 2026-07-14 16:02:17+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mqmlefn6c52n 2026-07-15 09:28:04+00:00| seen|...

CVE-2026-59674

A flaw was found in suricata. This vulnerability, related to improper handling of symbolic links, allows a local suricata user to escalate their privileges to root. By exploiting this, an attacker could gain full control over the affected system. Mitigation No mitigation is necessary for Red Hat'...

CVE-2026-6790

creationtimestamp| type| source ---|---|--- 2026-07-14 12:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm6wcvqbv2z 2026-07-20 05:45:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2lobt43d2h 2026-07-20 05:45:18+00:00| seen|...

CVE-2026-15416

creationtimestamp| type| source ---|---|--- 2026-07-14 11:55:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm5koihty24 2026-07-20 04:40:33+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mr2i2vucuw2g 2026-07-20 04:40:35+00:00| seen|...

CVE-2026-58229

creationtimestamp| type| source ---|---|--- 2026-07-14 11:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm4zdfta42i 2026-07-20 04:39:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr2hzhsiv62m...

CVE-2026-3014

creationtimestamp| type| source ---|---|--- 2026-07-14 10:41:41+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqlzh4vcfl2q 2026-07-14 12:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqm7i7rodg2i 2026-07-20 19:38:46+00:00| seen|...

CVE-2026-15075

creationtimestamp| type| source ---|---|--- 2026-07-14 08:43:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqlst2rjn527 2026-07-19 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqz7nav5rl2s 2026-07-20 05:37:26+00:00| seen|...

CVE-2026-6851

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

CVE-2026-59674

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...

CVE-2026-50574

creationtimestamp| type| source ---|---|--- 2026-07-14 08:07:19+00:00| seen| https://gist.github.com/akib-h/a603a4aaf4aab24ac683c30e9a2ad670 2026-07-18 18:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqwvuwkmrv2l...

CVE-2026-59674

A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...

atril: evince: xreader: PDF /GoToR action argv injection enables single-click RCE via --gtk-module dlopen

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

CVE-2026-6851 Improper link resolution before file access in Bitdefender Total Security via Link Following (VA-13681)

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...