CWE-59 · Improper Link Resolution Before File Access (page 5)
Page 5 of 17 — CVEs classified under CWE-59, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-12390 | High | 8.8 | 2025-03-20 | A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR… |
CVE-2024-12216 | High | 7.1 | 2025-03-20 | A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The func… |
CVE-2024-10986 | High | 8.8 | 2025-03-20 | GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz… |
CVE-2025-1683 | High | 7.8 | 2025-03-12 | Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access… |
CVE-2025-25008 | High | 7.1 | 2025-03-11 | Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally. |
CVE-2025-25185 | High | 7.5 | 2025-03-03 | GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker… |
CVE-2024-45418 | Medium | 5.4 | 2025-02-25 | Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via… |
CVE-2025-22480 | High | 7.0 | 2025-02-13 | Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could poten… |
CVE-2020-3432 | Medium | 5.6 | 2025-02-12 | A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the… |
CVE-2025-21420 | High | 7.8 | 2025-02-11 | Windows Disk Cleanup Tool Elevation of Privilege Vulnerability |
CVE-2025-21419 | High | 7.1 | 2025-02-11 | Windows Setup Files Cleanup Elevation of Privilege Vulnerability |
CVE-2025-21391 | High | 7.1 | 2025-02-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2025-21373 | High | 7.8 | 2025-02-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2025-21347 | Medium | 6.0 | 2025-02-11 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2025-21322 | High | 7.8 | 2025-02-11 | Microsoft PC Manager Elevation of Privilege Vulnerability |
CVE-2025-21188 | Medium | 6.0 | 2025-02-11 | Azure Network Watcher VM Extension Elevation of Privilege Vulnerability |
CVE-2025-0413 | High | 7.8 | 2025-02-05 | Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privi… |
CVE-2025-0146 | Low | 3.9 | 2025-01-30 | Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local acce… |
CVE-2025-24136 | Medium | 4.4 | 2025-01-27 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A maliciou… |
CVE-2025-24104 | Medium | 5.5 | 2025-01-27 | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted ba… |
CVE-2025-24103 | Medium | 5.5 | 2025-01-27 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may… |
CVE-2025-0377 | High | 7.5 | 2025-01-21 | HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. |
CVE-2024-57728 | High | 7.2 | 2025-01-15 | SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (… |
CVE-2025-21331 | High | 7.3 | 2025-01-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2025-21274 | Medium | 5.5 | 2025-01-14 | Windows Event Tracing Denial of Service Vulnerability |
CVE-2024-52050 | High | 7.8 | 2024-12-31 | A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Ple… |
CVE-2024-13043 | High | 7.8 | 2024-12-30 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta… |
CVE-2024-12753 | High | 7.3 | 2024-12-30 | Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installa… |
CVE-2024-12754 | Medium | 5.5 | 2024-12-30 | AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installati… |
CVE-2024-52535 | High | 7.1 | 2024-12-25 | Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) at… |
CVE-2024-44211 | Medium | 5.5 | 2024-12-20 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data. |
CVE-2024-47480 | High | 7.8 | 2024-12-18 | Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with… |
CVE-2024-52542 | Medium | 4.4 | 2024-12-17 | Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit… |
CVE-2024-56074 | Medium | 5.5 | 2024-12-15 | gitingest before 9996a06 mishandles symbolic links that point outside of the base directory. |
CVE-2024-12552 | High | 7.8 | 2024-12-13 | Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on aff… |
CVE-2024-49107 | High | 7.3 | 2024-12-12 | WmsRepair Service Elevation of Privilege Vulnerability |
CVE-2024-49059 | High | 7.0 | 2024-12-12 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2024-52537 | Medium | 6.3 | 2024-12-11 | Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially… |
CVE-2024-37143 | Critical | 10.0 | 2024-12-10 | Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 (for RCM 3.8.x train) and prior to… |
CVE-2024-53691 | High | 8.8 | 2024-12-06 | A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers… |
CVE-2024-50404 | High | 8.8 | 2024-12-06 | A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user acc… |
CVE-2024-22038 | High | 7.3 | 2024-11-28 | Various problems in obs-scm-bridge allows attackers that create specially crafted git repositories to leak information of cause denial of service. |
CVE-2024-7243 | High | 7.8 | 2024-11-22 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta… |
CVE-2024-7242 | High | 7.8 | 2024-11-22 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta… |
CVE-2024-7241 | High | 7.8 | 2024-11-22 | Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected insta… |
CVE-2024-7240 | High | 7.8 | 2024-11-22 | F-Secure Total Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installati… |
CVE-2024-7239 | High | 7.8 | 2024-11-22 | VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected i… |
CVE-2024-7238 | High | 7.8 | 2024-11-22 | VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on af… |
CVE-2024-7237 | High | 7.8 | 2024-11-22 | AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2024-7236 | Medium | 5.5 | 2024-11-22 | AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service cond… |
CVE-2024-7235 | Medium | 5.5 | 2024-11-22 | AVG AntiVirus Free Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affecte… |
CVE-2024-7234 | High | 7.8 | 2024-11-22 | AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2024-7233 | High | 7.8 | 2024-11-22 | Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe… |
CVE-2024-7232 | High | 7.8 | 2024-11-22 | Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe… |
CVE-2024-7231 | High | 7.8 | 2024-11-22 | Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected ins… |
CVE-2024-7230 | High | 7.8 | 2024-11-22 | Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected ins… |
CVE-2024-7229 | High | 7.8 | 2024-11-22 | Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected ins… |
CVE-2024-7228 | Medium | 5.5 | 2024-11-22 | Avast Free Antivirus Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affec… |
CVE-2024-7227 | High | 7.8 | 2024-11-22 | Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affe… |
CVE-2024-9766 | High | 7.8 | 2024-11-22 | Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on aff… |
CVE-2024-6260 | High | 7.8 | 2024-11-22 | Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2024-6233 | High | 7.8 | 2024-11-22 | Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privilege… |
CVE-2024-30377 | High | 7.8 | 2024-11-22 | G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on… |
CVE-2024-1868 | High | 7.8 | 2024-11-22 | G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected ins… |
CVE-2024-1867 | High | 7.8 | 2024-11-22 | G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected ins… |
CVE-2024-48862 | Critical | 9.8 | 2024-11-22 | A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file syst… |
CVE-2024-52522 | | 2024-11-15 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --… | |
CVE-2021-1491 | Medium | 6.5 | 2024-11-15 | A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to read arbitrary fil… |
CVE-2023-20004 | Medium | 4.4 | 2024-11-15 | Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local fil… |
CVE-2024-51721 | High | 7.3 | 2024-11-12 | A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potential… |
CVE-2024-49051 | High | 7.8 | 2024-11-12 | Microsoft PC Manager Elevation of Privilege Vulnerability |
CVE-2024-10007 | Critical | 9.1 | 2024-11-07 | A path collision and arbitrary code execution vulnerability was identified in GitHub Enterprise Server that allowed container escape to escalate to root via gh… |
CVE-2024-6868 | Critical | 9.8 | 2024-10-29 | mudler/LocalAI version 2.17.1 allows for arbitrary file write due to improper handling of automatic archive extraction. When model configurations specify addit… |
CVE-2024-44273 | Medium | 5.5 | 2024-10-28 | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.1 and iPadOS 18.1, macOS Sequoia 15.1, macOS Sonoma 14.7.1, tvOS 18… |
CVE-2024-44264 | Medium | 5.5 | 2024-10-28 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. A maliciou… |
CVE-2024-44258 | High | 7.1 | 2024-10-28 | This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS… |
CVE-2024-44175 | Medium | 5.5 | 2024-10-28 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7.1. An app may be able to access sensi… |
CVE-2024-45316 | High | 7.8 | 2024-10-11 | The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client)… |
CVE-2024-45315 | Medium | 5.5 | 2024-10-11 | The Improper link resolution before file access ('Link Following') vulnerability in SonicWall Connect Tunnel (version 12.4.3.271 and earlier of Windows client)… |
CVE-2024-43603 | Medium | 5.5 | 2024-10-08 | Visual Studio Collector Service Denial of Service Vulnerability |
CVE-2024-43551 | High | 7.8 | 2024-10-08 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-43501 | High | 7.8 | 2024-10-08 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-38097 | High | 7.1 | 2024-10-08 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-27458 | High | 8.8 | 2024-10-07 | A potential security vulnerability has been identified in the HP Hotkey Support software, which might allow local escalation of privilege. HP is releasing miti… |
CVE-2024-9341 | Medium | 5.4 | 2024-10-01 | A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the c… |
CVE-2024-8404 | High | 7.8 | 2024-09-26 | An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability… |
CVE-2024-45770 | Medium | 4.4 | 2024-09-19 | A vulnerability was found in Performance Co-Pilot (PCP). This flaw can only be exploited if an attacker has access to a compromised PCP system account. The iss… |
CVE-2024-46744 | High | 7.8 | 2024-09-18 | In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in pic… |
CVE-2024-44178 | Medium | 5.5 | 2024-09-17 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be ab… |
CVE-2024-44132 | High | 8.8 | 2024-09-17 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox. |
CVE-2024-44131 | Medium | 5.5 | 2024-09-17 | This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sens… |
CVE-2024-43470 | High | 7.3 | 2024-09-10 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
CVE-2024-38188 | High | 7.1 | 2024-09-10 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
CVE-2024-39578 | Medium | 6.3 | 2024-08-31 | Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could… |
CVE-2023-43078 | Medium | 6.7 | 2024-08-28 | Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder deletion, which… |
CVE-2024-5928 | High | 7.8 | 2024-08-21 | VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on af… |
CVE-2024-38098 | High | 7.8 | 2024-08-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-38084 | High | 7.8 | 2024-08-13 | Microsoft OfficePlus Elevation of Privilege Vulnerability |
CVE-2024-7252 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2024-7251 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |