Improper Link Resolution Before File Access ('Link Following')

🗓️ 09 Jul 2024 21:14:35Reported by Snyk Security DatabaseType

Privilege escalation in Microsoft.IO.Redist via improper link resolution during Windows install; update to 6.0.1

Reporter	Title	Published	Views	Family All 96
AlpineLinux	CVE-2024-38081	9 Jul 202417:03	–	alpinelinux
BDU FSTEC	The vulnerability of the Microsoft.NET Framework and.NET operating systems for Windows lies in the improper handling of symbolic links before accessing files. This allows attackers to exploit their privileges.	5 Aug 202400:00	–	bdu_fstec
IBM Security Bulletins	Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2024-38081	3 Jun 202508:20	–	ibm
Circl	CVE-2024-38081	3 May 202500:17	–	circl
CNNVD	Microsoft Visual Studio and Microsoft .NET Security Vulnerabilities	9 Jul 202400:00	–	cnnvd
CVE	CVE-2024-38081	9 Jul 202417:03	–	cve
Cvelist	CVE-2024-38081 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability	9 Jul 202417:03	–	cvelist
EUVD	EUVD-2024-2365	3 Oct 202520:07	–	euvd
Github Security Blog	Microsoft Security Advisory CVE-2024-38081 \| .NET Elevation of Privilege Vulnerability	9 Jul 202421:14	–	github
Microsoft KB	July 9, 2024-KB5039885 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016	9 Jul 202407:00	–	mskb