CVE-2025-41668: Improper Link Resolution Before File Access

A low privileged remote attacker with file access can replace a critical file or folder used by the service security-profile to get read, write and execute access to any file on the device...

CVE-2025-48820: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

CVE-2025-49680: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Performance Recorder allows an authorized attacker to deny service locally...

CVE-2025-49738: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

PT-2025-28551 · Microsoft · Windows Appx Deployment Server +1

Name of the Vulnerable Software and Affected Versions: Windows AppX Deployment Service affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in the Windows AppX Deployment Service. This allows an authorize...

PT-2025-28625

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an unauthorized attacker to elevate privileges over a network...

PT-2025-28578 · Microsoft · Windows Performance Recorder +1

Name of the Vulnerable Software and Affected Versions: Windows Performance Recorder affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Performance Recorder. This allows an authorized attacker...

PT-2025-28504 · Microsoft · Service Fabric

Name of the Vulnerable Software and Affected Versions: Service Fabric affected versions not specified Description: The issue concerns improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. This could...

PT-2025-28624 · Microsoft · Pcmanager

Name of the Vulnerable Software and Affected Versions: Microsoft PC Manager affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally...

CVE-2025-41667: Improper Link Resolution Before File Access

A low privileged remote attacker with file access can replace a critical file used by the arp-preinit script to get read, write and execute access to any file on the device...

KB5062554: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (July 2025)

The remote Windows host is missing security update 5062554. It is, therefore, affected by multiple vulnerabilities - Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally. CVE-2025-49659 - Improper link resolution before file access 'link following' in...

CVE-2025-41666: Improper Link Resolution Before File Access

A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized...

Git: Multiple Vulnerabilities

Background Git is a free and open source distributed version control system designed to handle everything from small to very large projects with speed and efficiency. Description Multiple vulnerabilities have been discovered in Git. Please review the CVE identifiers referenced below for details...

Mescius ActiveReports.NET code issues and vulnerabilities

Mescius ActiveReports.NET is a .NET reporting tool from Mescius Japan. A code issue vulnerability exists in Mescius ActiveReports.NET that stems from the TypeResolutionService class not properly validating user-supplied data, which could lead to deserialization attacks and remote code execution...

CVE-2025-38235

CVE-2025-38235: Linux kernel fix for appletb_kbd backlight reference counting leak. backlight_device_get_by_name increments ref count for android backlight named "appletb_backlight" and it is not released, causing a reference leak. The fix decrements the reference count on removal via put_device ...

ggml-devel-5699-1.1 on GA media (moderate)

ggml-devel-5699-1.1 on GA media Announcement ID: openSUSE-SU-2025:15245-1 Rating: moderate Cross-References: CVE-2025-49847 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

CVE-2025-38233

In the Linux kernel, the following vulnerability has been resolved: powerpc64/ftrace: fix clobbered r15 during livepatching While r15 is clobbered always with PPCFTRACEOUTOFLINE, it is not restored in livepatch sequence leading to not so obvious fails like below: BUG: Unable to handle kernel data...

CVE-2025-38229

CVE-2025-38229 – Linux kernel (cxusb/dvb-usb I2C path) – concrete details : The issue arises in the I2C transfer path for cxusb-based DVB devices. When a usb_bulk_msg() write succeeds but rlen > 0, the subsequent read may still occur; however, if the write fails and rlen is 1, the read path is...

CVE-2025-38229

In the Linux kernel, the following vulnerability has been resolved: media: cxusb: no longer judge rbuf when the write fails syzbot reported a uninit-value in cxusbi2cxfer. 1 Only when the write operation of usbbulkmsg in dvbusbgenericrw succeeds and rlen is greater than 0, the read operation of...

CVE-2025-38228

In the Linux kernel, the following vulnerability has been resolved: media: imagination: fix a potential memory leak in e5010probe Add videodevicerelease to release the memory allocated by videodevicealloc if something goes wrong...