CWE-59: Improper Link Resolution Before File Access (Link Following), page 16

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

What the weakness is: CWE-59 at MITRE

1. 7.8CVE-2023-32179EPSS 0.5%2024-05-03

   VIPRE Antivirus Plus FPQuarTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain …

2. 7.8CVE-2023-32178EPSS 0.5%2024-05-03

   VIPRE Antivirus Plus TelFileTransfer Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain…

3. 7.8CVE-2023-32175EPSS 0.5%2024-05-03

   VIPRE Antivirus Plus Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Antivirus Plus. An attacker must first obtain the ability to …

4. 7.8CVE-2023-27347EPSS 0.4%2024-05-03

   G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G Data Total Security. An attacker must first obtain the ability t…

5. 9.8CVE-2024-23459EPSS 0.5%2024-05-02

   An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.

6. 7.8CVE-2023-41971EPSS 0.2%2024-05-02

   An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7.

7. 10.0CVE-2024-28189ExploitEPSS 7.2%2024-04-18

   Judge0 is an open-source online code execution system. The application uses the UNIX chown command on an untrusted file within the sandbox. An attacker can abuse this by creating a symbolic link (symlink) to a file outside the sandbox, all…

8. 10.0CVE-2024-28185ExploitEPSS 7.1%2024-04-18

   Judge0 is an open-source online code execution system. The application does not account for symlinks placed inside the sandbox directory, which can be leveraged by an attacker to write to arbitrary files and gain code execution outside of …

9. 8.4CVE-2024-29989EPSS 0.7%2024-04-09

   Azure Monitor Agent Elevation of Privilege Vulnerability

10. 7.8CVE-2024-28907EPSS 0.6%2024-04-09

    Microsoft Brokering File System Elevation of Privilege Vulnerability

11. 7.3CVE-2024-26216EPSS 0.9%2024-04-09

    Windows File Server Resource Management Service Elevation of Privilege Vulnerability

12. 7.8CVE-2024-26158EPSS 12%2024-04-09

    Microsoft Install Service Elevation of Privilege Vulnerability

13. 7.8CVE-2024-21447EPSS 1.4%2024-04-09

    Windows Authentication Elevation of Privilege Vulnerability

14. 6.0CVE-2024-25953EPSS 0.2%2024-03-28

    Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, informati…

15. 6.0CVE-2024-25952EPSS 0.2%2024-03-28

    Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, informati…

16. 7.9CVE-2024-29188EPSS 0.2%2024-03-24

    WiX toolset lets developers create installers for Windows Installer, the Windows installation engine. The custom action behind WiX's `RemoveFolderEx` functionality could allow a standard user to delete protected directories. `RemoveFolderE…

17. 8.8CVE-2024-28916EPSS 0.6%2024-03-21

    Xbox Gaming Services Elevation of Privilege Vulnerability

18. 8.6CVE-2024-1753EPSS 0.5%2024-03-18

    A flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root…

19. 7.8CVE-2024-26199EPSS 1.2%2024-03-12

    Microsoft Office Elevation of Privilege Vulnerability

20. 7.0CVE-2024-21432EPSS 0.7%2024-03-12

    Windows Update Stack Elevation of Privilege Vulnerability

21. 5.5CVE-2024-23285EPSS 0.2%2024-03-08

    This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sonoma 14.4. An app may be able to create symlinks to protected regions of the disk.

22. 7.1CVE-2024-0068EPSS 0.2%2024-02-29

    Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.

23. 7.8CVE-2023-42942EPSS 0.4%2024-02-21

    This issue was addressed with improved handling of symlinks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. A malicious app may be able to ga…

24. 5.3CVE-2024-21397EPSS 0.5%2024-02-13

    Microsoft Azure File Sync Elevation of Privilege Vulnerability

25. 7.3CVE-2024-21329EPSS 1.1%2024-02-13

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

26. 7.5CVE-2024-1329EPSS 0.6%2024-02-08

    HashiCorp Nomad and Nomad Enterprise 1.5.13 up to 1.6.6, and 1.7.3 template renderer is vulnerable to arbitrary file write on the host as the Nomad client user through symlink attacks. This vulnerability, CVE-2024-1329, is fixed in Nomad 1…

27. 6.6CVE-2023-32474EPSS 0.2%2024-02-06

    Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could potentially exploit this vulnerability during installation leading to arbitrary folde…

28. 7.1CVE-2023-32454EPSS 0.2%2024-02-06

    DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service

29. 5.3CVE-2023-7216EPSS 0.9%2024-02-05

    A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symli…

30. 9.6CVE-2023-52138EPSS 1.7%2024-02-05

    Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve full Remote Command Execution (RCE) on the target. While handling CPIO archives,…

31. 7.8CVE-2023-52338EPSS 0.3%2024-01-23

    A link following vulnerability in the Trend Micro Deep Security 20.0 and Trend Micro Cloud One - Endpoint and Workload Security Agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacke…

32. 7.8CVE-2023-52094EPSS 0.3%2024-01-23

    An updater link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to abuse the updater to delete an arbitrary folder, leading for a local privilege escalation on affected installations. Please note: …

33. 7.8CVE-2023-52092EPSS 0.3%2024-01-23

    A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o…

34. 7.8CVE-2023-52091EPSS 0.3%2024-01-23

    An anti-spyware engine link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged …

35. 7.8CVE-2023-52090EPSS 0.3%2024-01-23

    A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o…

36. 7.8CVE-2023-47192EPSS 0.2%2024-01-23

    An agent link vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code …

37. 7.8CVE-2023-6336EPSS 0.2%2024-01-16

    Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

38. 7.8CVE-2023-6335EPSS 0.2%2024-01-16

    Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.

39. 7.8CVE-2023-42137EPSS 0.5%2024-01-15

    PAX Android based POS devices with PayDroid_8.1.0_Sagittarius_V11.1.50_20230614 or earlier can allow for command execution with high privileges by using malicious symlinks. The attacker must have shell access to the device in order to …

40. 7.8CVE-2023-31003EPSS 0.2%2024-01-11

    IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to obtain root access due to improper access controls. IBM X-Fo…

41. 7.8CVE-2024-20656EPSS 3.9%2024-01-09

    Visual Studio Elevation of Privilege Vulnerability

42. 7.8CVE-2024-0206EPSS 0.2%2024-01-09

    A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the reg…

43. 5.5CVE-2023-51654EPSS 0.2%2023-12-26

    Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC.

44. 8.8CVE-2023-28872EPSS 0.8%2023-12-25

    Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location.

45. 7.8CVE-2023-43116EPSS 0.3%2023-12-22

    A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-age…

46. 7.8CVE-2023-36391EPSS 7.2%2023-12-12

    Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

47. 7.8CVE-2023-35633EPSS 8.7%2023-12-12

    Windows Kernel Elevation of Privilege Vulnerability

48. 7.3CVE-2023-35624EPSS 0.9%2023-12-12

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

49. 4.3CVE-2023-28871EPSS 0.6%2023-12-09

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers to read registry information of the operating system by creating a symbolic link.

50. 6.5CVE-2023-28869EPSS 0.8%2023-12-09

    Support Assistant in NCP Secure Enterprise Client before 12.22 allows attackers read the contents of arbitrary files on the operating system by creating a symbolic link.