EUVD-2026-73192

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

CVE-2026-68830

CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...

CVE-2026-67368

Microsoft SQL Server is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker to elevate privileges over a network. The root cause is a link following issue in how SQL Server resolves file links prior to access. Per the assigned CVSS...

EUVD-2026-73180

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

Exploit for CVE-2026-73320

CVE-2026-73320 XenForo before 2.3.13 exposes pending rich-lin...

python: Python tarfile module: File modification and content disclosure via crafted archives

A flaw was found in Python's tarfile module. This module's data and tar extraction filters are vulnerable to specially crafted archives containing a hard link to a symbolic link. An attacker could exploit this by providing a malicious archive. This could lead to unauthorized modification of file...

Windows Update Stack Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

Windows Compressed Folder Information Disclosure Vulnerability

Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

Windows NTFS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows Shell Spoofing Vulnerability

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

Windows Container Manager Service Security Feature Bypass Vulnerability

Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...

Windows NTFS Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution bsc1276981. CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage...

SUSE-SU-2026:4082-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2026-71556: github.com/go-git/go-git/v5: Arbitrary file read/write via symbolic link resolution bsc1276981. - CVE-2026-71557: github.com/go-git/go-git/v5: Malicious reference names may modify files outside the reference storage...

CVE-2026-43971

A flaw was found in ninenines cowlib. This vulnerability, due to improper encoding or escaping of output, allows an attacker to perform Link header directive smuggling. By manipulating the target URI, 'rel' value, or attribute keys in applications that process Link headers through cowlib, a remot...