CWE-59 · Improper Link Resolution Before File Access (page 6)
Page 6 of 17 — CVEs classified under CWE-59, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-7250 | High | 7.8 | 2024-07-29 | Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2024-7249 | High | 7.8 | 2024-07-29 | Comodo Firewall Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installat… |
CVE-2024-29069 | Medium | 4.8 | 2024-07-25 | In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap. The snap format is a squashfs file-s… |
CVE-2024-38081 | High | 7.3 | 2024-07-09 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-38022 | High | 7.0 | 2024-07-09 | Windows Image Acquisition Elevation of Privilege Vulnerability |
CVE-2024-38013 | Medium | 6.7 | 2024-07-09 | Microsoft Windows Server Backup Elevation of Privilege Vulnerability |
CVE-2024-35261 | High | 7.8 | 2024-07-09 | Azure Network Watcher VM Extension Elevation of Privilege Vulnerability |
CVE-2024-6147 | High | 7.8 | 2024-06-20 | Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected inst… |
CVE-2024-5742 | Medium | 6.7 | 2024-06-12 | A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file i… |
CVE-2024-35254 | High | 7.1 | 2024-06-11 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-35253 | Medium | 4.4 | 2024-06-11 | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
CVE-2024-30104 | High | 7.8 | 2024-06-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-30093 | High | 7.3 | 2024-06-11 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2024-30076 | Medium | 6.8 | 2024-06-11 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2024-30065 | Medium | 5.5 | 2024-06-11 | Windows Themes Denial of Service Vulnerability |
CVE-2024-35235 | Medium | 4.4 | 2024-06-11 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd ser… |
CVE-2024-36306 | Medium | 6.1 | 2024-06-10 | A link following vulnerability in the Trend Micro Apex One and Apex One as a Service Damage Cleanup Engine could allow a local attacker to create a denial-of-s… |
CVE-2024-36305 | High | 7.8 | 2024-06-10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please… |
CVE-2024-27885 | Medium | 6.3 | 2024-06-10 | This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An app ma… |
CVE-2024-5102 | High | 7.0 | 2024-06-10 | A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run pro… |
CVE-2024-3829 | Critical | 9.1 | 2024-06-03 | qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability b… |
CVE-2024-4454 | High | 7.8 | 2024-05-22 | WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileg… |
CVE-2023-51636 | High | 7.8 | 2024-05-22 | Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations… |
CVE-2024-30060 | High | 7.8 | 2024-05-16 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-32002 | Critical | 9.0 | 2024-05-14 | Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in… |
CVE-2024-30033 | High | 7.0 | 2024-05-14 | Windows Search Service Elevation of Privilege Vulnerability |
CVE-2024-30018 | High | 7.8 | 2024-05-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-26238 | High | 7.8 | 2024-05-14 | Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability |
CVE-2024-3037 | High | 7.8 | 2024-05-14 | An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability… |
CVE-2024-31952 | Medium | 6.7 | 2024-05-14 | An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via… |
CVE-2023-50226 | High | 7.8 | 2024-05-03 | Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2023-50197 | High | 7.8 | 2024-05-03 | Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on a… |
CVE-2023-42126 | High | 7.8 | 2024-05-03 | G DATA Total Security GDBackupSvc Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privil… |
CVE-2023-42125 | High | 7.8 | 2024-05-03 | Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges o… |
CVE-2023-42099 | High | 7.8 | 2024-05-03 | Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on a… |
CVE-2023-34283 | Medium | 4.6 | 2024-05-03 | NETGEAR RAX30 USB Share Link Following Information Disclosure Vulnerability. This vulnerability allows physically present attackers to disclose sensitive infor… |
CVE-2023-32179 | High | 7.8 | 2024-05-03 | VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges o… |
CVE-2023-32178 | High | 7.8 | 2024-05-03 | VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2023-32175 | High | 7.8 | 2024-05-03 | VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected inst… |
CVE-2023-27347 | High | 7.8 | 2024-05-03 | G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected ins… |
CVE-2024-23459 | High | 7.1 | 2024-05-02 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This… |
CVE-2023-41971 | Medium | 5.3 | 2024-05-02 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.T… |
CVE-2024-28189 | Critical | 10.0 | 2024-04-18 | Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abu… |
CVE-2024-28185 | Critical | 10.0 | 2024-04-18 | Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leverage… |
CVE-2024-29989 | High | 8.4 | 2024-04-09 | Azure Monitor Agent Elevation of Privilege Vulnerability |
CVE-2024-28907 | High | 7.8 | 2024-04-09 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
CVE-2024-26216 | High | 7.3 | 2024-04-09 | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
CVE-2024-26158 | High | 7.8 | 2024-04-09 | Microsoft Install Service Elevation of Privilege Vulnerability |
CVE-2024-21447 | High | 7.8 | 2024-04-09 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2024-25953 | Medium | 6.0 | 2024-03-28 | Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could… |
CVE-2024-25952 | Medium | 6.0 | 2024-03-28 | Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could… |
CVE-2024-29188 | High | 7.9 | 2024-03-24 | WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's `RemoveFolderEx` functiona… |
CVE-2024-28916 | High | 8.8 | 2024-03-21 | Xbox Gaming Services Elevation of Privilege Vulnerability |
CVE-2024-1753 | High | 8.6 | 2024-03-18 | A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers… |
CVE-2024-26199 | High | 7.8 | 2024-03-12 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2024-21432 | High | 7.0 | 2024-03-12 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2024-23285 | Medium | 5.5 | 2024-03-08 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regio… |
CVE-2024-0068 | Medium | 5.5 | 2024-02-29 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Work… |
CVE-2023-42942 | High | 7.8 | 2024-02-21 | This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, i… |
CVE-2024-21397 | Medium | 5.3 | 2024-02-13 | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
CVE-2024-21329 | High | 7.3 | 2024-02-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-1329 | High | 7.7 | 2024-02-08 | HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user… |
CVE-2023-32474 | Medium | 6.6 | 2024-02-06 | Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could pote… |
CVE-2023-32454 | Medium | 6.3 | 2024-02-06 | DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could expl… |
CVE-2023-7216 | Medium | 5.3 | 2024-02-05 | A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially… |
CVE-2023-52138 | High | 8.2 | 2024-02-05 | Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve… |
CVE-2023-52338 | High | 7.8 | 2024-01-23 | A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attac… |
CVE-2023-52094 | High | 7.8 | 2024-01-23 | An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, lead… |
CVE-2023-52092 | High | 7.8 | 2024-01-23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please… |
CVE-2023-52091 | High | 7.8 | 2024-01-23 | An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. P… |
CVE-2023-52090 | High | 7.8 | 2024-01-23 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please… |
CVE-2023-47192 | High | 7.8 | 2024-01-23 | An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please… |
CVE-2023-6336 | High | 7.2 | 2024-01-16 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affec… |
CVE-2023-6335 | Medium | 6.4 | 2024-01-16 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue aff… |
CVE-2023-42137 | High | 7.8 | 2024-01-15 | PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malici… |
CVE-2023-31003 | High | 8.4 | 2024-01-11 | IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could all… |
CVE-2024-20656 | High | 7.8 | 2024-01-09 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2024-0206 | High | 7.1 | 2024-01-09 | A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially… |
CVE-2023-51654 | Medium | 5.5 | 2023-12-26 | Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by… |
CVE-2023-28872 | High | 8.8 | 2023-12-25 | Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a… |
CVE-2023-43116 | High | 7.8 | 2023-12-22 | A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership… |
CVE-2023-36391 | High | 7.8 | 2023-12-12 | Local Security Authority Subsystem Service Elevation of Privilege Vulnerability |
CVE-2023-35633 | High | 7.8 | 2023-12-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35624 | High | 7.3 | 2023-12-12 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2023-28871 | Medium | 4.3 | 2023-12-09 | Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic lin… |
CVE-2023-28869 | Medium | 6.5 | 2023-12-09 | Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symb… |
CVE-2023-28868 | High | 8.1 | 2023-12-09 | Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to delete arbitrary files on the operating system by creating a symbolic link. |
CVE-2023-39246 | Medium | 4.6 | 2023-11-16 | Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows… |
CVE-2023-43590 | High | 7.8 | 2023-11-15 | Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access. |
CVE-2023-36705 | High | 7.8 | 2023-11-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-36399 | High | 7.1 | 2023-11-14 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2023-36394 | High | 7.0 | 2023-11-14 | Windows Search Service Elevation of Privilege Vulnerability |
CVE-2023-36047 | High | 7.8 | 2023-11-14 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2023-36046 | High | 7.1 | 2023-11-14 | Windows Authentication Denial of Service Vulnerability |
CVE-2023-6069 | Critical | 9.9 | 2023-11-10 | Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0. |
CVE-2020-28407 | High | 7.1 | 2023-11-03 | In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as T… |
CVE-2023-5834 | Low | 3.8 | 2023-10-27 | HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized fil… |
CVE-2018-17559 | High | 7.5 | 2023-10-26 | Due to incorrect access control, unauthenticated remote attackers can view the /video.mjpg video stream of certain ABUS TVIP cameras. |
CVE-2023-42844 | High | 7.5 | 2023-10-25 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. A website m… |
CVE-2023-46655 | Medium | 6.5 | 2023-10-25 | Jenkins CloudBees CD Plugin 1.1.32 and earlier follows symbolic links to locations outside of the directory from which artifacts are published during the 'Clou… |