CWE-59: Improper Link Resolution Before File Access (Link Following), page 13

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

What the weakness is: CWE-59 at MITRE

1. 7.8CVE-2024-13759EPSS 0.2%2025-05-09

   Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64  allows local attackers to gain system-level privileges via arbitrary file deletion

2. 7.3CVE-2025-3224EPSS 0.2%2025-04-28

   A vulnerability in the update process of Docker Desktop for Windows versions prior to 4.41.0 could allow a local, low-privileged attacker to escalate privileges to SYSTEM. During an update, Docker Desktop attempts to delete files and subdi…

3. 6.9CVE-2025-1697EPSS 0.2%2025-04-18

   A potential security vulnerability has been identified in the HP Touchpoint Analytics Service for certain HP PC products with versions prior to 4.2.2439. This vulnerability could potentially allow a local attacker to escalate privileges. H…

4. 6.1CVE-2025-32817EPSS 0.4%2025-04-16

   A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption.

5. 7.3CVE-2025-29983EPSS 0.2%2025-04-15

   Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to E…

6. 7.2CVE-2025-23010EPSS 0.4%2025-04-10

   An Improper Link Resolution Before File Access ('Link Following') vulnerability in SonicWall NetExtender Windows (32 and 64 bit) client which allows an attacker to manipulate file paths.

7. 7.8CVE-2025-27727EPSS 1.0%2025-04-08

   Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

8. 7.8CVE-2025-21204EPSS 7.1%2025-04-08

   Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

9. 9.8CVE-2025-30457EPSS 1.2%2025-03-31

   This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to create symlinks to protected regions of the disk.

10. 5.5CVE-2025-24278EPSS 0.3%2025-03-31

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.

11. 4.4CVE-2025-24242EPSS 0.3%2025-03-31

    This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root privileges may be able to access private information.

12. 2.1CVE-2025-30371EPSS 0.4%2025-03-28

    Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase insta…

13. 7.5CVE-2024-12905ExploitEPSS 2.3%2025-03-27

    An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can resul…

14. 7.8CVE-2025-29795EPSS 0.4%2025-03-23

    Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

15. 8.8CVE-2024-12390EPSS 1.7%2025-03-20

    A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The application supports the extraction of user-provided RAR files without proper validation. The Python rarfile module, which supports syml…

16. 7.1CVE-2024-12216EPSS 0.3%2025-03-20

    A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization…

17. 8.8CVE-2024-10986EPSS 0.8%2025-03-20

    GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload function. This function can download and extract tar.gz files from arxiv.org. Despite implementing protections against path traversal, t…

18. 7.8CVE-2025-1683EPSS 0.2%2025-03-12

    Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbo…

19. 7.1CVE-2025-25008EPSS 0.6%2025-03-11

    Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

20. 7.5CVE-2025-25185EPSS 0.6%2025-03-03

    GPT Academic provides interactive interfaces for large language models. In 3.91 and earlier, GPT Academic does not properly account for soft links. An attacker can create a malicious file as a soft link pointing to a target file, then pack…

21. 8.8CVE-2024-45418EPSS 0.5%2025-02-25

    Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to conduct an escalation of privilege via network access.

22. 7.8CVE-2025-22480EPSS 0.2%2025-02-13

    Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevat…

23. 5.6CVE-2020-3432EPSS 0.2%2025-02-12

    A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrec…

24. 7.8CVE-2025-21420EPSS 3.7%2025-02-11

    Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

25. 7.1CVE-2025-21419EPSS 0.7%2025-02-11

    Windows Setup Files Cleanup Elevation of Privilege Vulnerability

26. 7.1CVE-2025-21391KEVEPSS 2.3%2025-02-11

    Windows Storage Elevation of Privilege Vulnerability

27. 7.8CVE-2025-21373EPSS 0.8%2025-02-11

    Windows Installer Elevation of Privilege Vulnerability

28. 6.0CVE-2025-21347EPSS 0.7%2025-02-11

    Windows Deployment Services Denial of Service Vulnerability

29. 7.8CVE-2025-21322EPSS 0.7%2025-02-11

    Microsoft PC Manager Elevation of Privilege Vulnerability

30. 6.0CVE-2025-21188EPSS 0.7%2025-02-11

    Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

31. 7.8CVE-2025-0413EPSS 0.4%2025-02-05

    Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obt…

32. 5.0CVE-2025-0146EPSS 0.2%2025-01-30

    Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.

33. 4.4CVE-2025-24136EPSS 0.3%2025-01-27

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A malicious app may be able to create symlinks to protected regions of the disk.

34. 5.5CVE-2025-24104EPSS 1.5%2025-01-27

    This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.7.4. Restoring a maliciously crafted backup file may lead to modification of protected system files.

35. 5.5CVE-2025-24103EPSS 0.6%2025-01-27

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app may be able to access protected user data.

36. 9.1CVE-2025-0377EPSS 0.7%2025-01-21

    HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.

37. 7.2CVE-2024-57728KEVExploitEPSS 64%2025-01-15

    SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in t…

38. 7.3CVE-2025-21331EPSS 1.1%2025-01-14

    Windows Installer Elevation of Privilege Vulnerability

39. 5.5CVE-2025-21274EPSS 0.8%2025-01-14

    Windows Event Tracing Denial of Service Vulnerability

40. 7.8CVE-2024-52050EPSS 0.5%2024-12-31

    A LogServer arbitrary file creation vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged co…

41. 7.8CVE-2024-13043EPSS 0.3%2024-12-30

    Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to ex…

42. 7.3CVE-2024-12753EPSS 0.3%2024-12-30

    Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute …

43. 5.5CVE-2024-12754EPSS 1.2%2024-12-30

    AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privile…

44. 8.8CVE-2024-52535EPSS 0.6%2024-12-25

    Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authe…

45. 5.5CVE-2024-44211EPSS 0.4%2024-12-20

    This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data.

46. 7.8CVE-2024-47480EPSS 0.2%2024-12-18

    Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation…

47. 5.5CVE-2024-52542EPSS 0.2%2024-12-17

    Dell AppSync, version 4.6.0.x, contain a Symbolic Link (Symlink) Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering.

48. 5.5CVE-2024-56074EPSS 0.4%2024-12-15

    gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.

49. 7.8CVE-2024-12552EPSS 0.2%2024-12-13

    Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability t…

50. 7.3CVE-2024-49107EPSS 1.9%2024-12-12

    WmsRepair Service Elevation of Privilege Vulnerability