EUVD-2026-73064

Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-69379

CVE-2026-69379 is a link following vulnerability (improper link resolution before file access) in Windows NTFS that allows a local, authorized attacker to escalate privileges . The vulnerability is classified as HIGH severity (CVSS 3.1 base score 7.0) with high impact on confidentiality, integrit...

EUVD-2026-73236

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-68830

CVE-2026-68830 is an information disclosure vulnerability in Windows Universal Plug and Play (UPnP) Device Host , caused by improper link resolution before file access ('link following'). An authorized local attacker (low privileges, no user interaction) can exploit this to disclose information, ...

EUVD-2026-73192

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

EUVD-2026-73180

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-67368

Microsoft SQL Server is affected by an improper link resolution before file access ('link following') flaw that allows an authorized attacker to elevate privileges over a network. The root cause is a link following issue in how SQL Server resolves file links prior to access. Per the assigned CVSS...

CVE-2019-10092

CVE-2019-10092: Limited Cross-Site Scripting via "Proxy Error" Page in Apache HTTP Server In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the modproxy error page. An attacker could cause the link on the error page to be malformed and instead point t...

CVE-2024-21111

CVE-2024-21111 Oracle VirtualBox 7.0.16 之前版本存在本地权限提升漏洞，攻击者可通过符号链接跟随实现任意文件删除和任意文件移动。 VirtualBox 尝试以 NT AUTHORITY\SYSTEM 权限将 C:\ProgramData\VirtualBox（所有用户均可写入）中的日志文件按序号备份，但最多保留 10 个日志。VirtualBox 还会尝试以 NT AUTHORITY\SYSTEM 权限删除第 11 个日志，这暴露了两个导致权限提升的漏洞。发现这个漏洞的过程非常有趣 : 任意文件删除...

CVE-2026-46552

CVE-2026-46552 NocoDB Shared-Base Links Could Invite Real Base Members and Survive Share Revocation Intro I found this issue while reviewing NocoDB , with a simple security question in mind: Can a public shared-base link cross the boundary from temporary shared access into real authenticated base...

Microsoft SQL Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

Windows Resilient File System (ReFS) Deduplication Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

Windows NTFS Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to perform tampering locally...

Windows Shell Spoofing Vulnerability

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

Windows Update Stack Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network...

Windows NTFS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...

Blind-Trust-CVE-2024-21413-Research

BLIND TRUST - Moniker Link Phishing Engagement Framework A security research tool for simulating targeted phishing campaigns using the CVE-2024-21413 Moniker Link vulnerability. Designed for authorized red team operations, penetration testing, and security awareness training. Overview BLIND TRUST...

CVE-2026-82592

D-Link Router DIR-825M - Desbordamiento de Búfer en /boafrm/formDiskFormat Detalles de la Vulnerabilidad Información Detallada Campo| Valor ---|--- Vendedor| D-Link Producto| D-Link DIR-825M y otros modelos que comparten la misma base de código de firmware Versión Afectada| Firmware v1.1.8 Tipo d...