CVE-2023-21752

CVE-2023-21752 PoC for arbitrary file delete vulnerability in Windows Backup service. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21752 This repo contains two exploits: v1 - Just perform file delete of user choice v2 - Tries to abuse arb delete to spawn elevated cmd shell not...

CVE-2026-70184

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-62687

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-108135

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-108135

A vulnerability exists in the Windows Backup Engine due to improper link resolution before file access (link following). This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:...

EUVD-2026-100454

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-70184

The Windows Backup Engine is vulnerable to an Improper Resolution of Path Equivalence (CWE-41) vulnerability. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a HIGH base severity score of 7.8. While the impact involves high confidentiality, int...

EUVD-2026-100129

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

EUVD-2026-99839

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-62687

The Windows Backup Engine is susceptible to an Improper Link Resolution Before File Access (link following) vulnerability. This issue allows an authorized attacker to perform a local information disclosure , potentially accessing sensitive data. No specific exploit details or affected versions ar...

Windows Backup Engine Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Windows Backup Engine Elevation of Privilege Vulnerability

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-62687: Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

CVE-2026-62687: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70184: Windows Backup Engine Elevation of Privilege Vulnerability

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

PT-2026-112285

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-108135: Windows Backup Engine Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

CVE-2026-108135: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...