Vulnerability index

Browse CVEs

188 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Link Following (Symlink)CWE-59 × clear
Windows 11 24h2 HIGH 7.8
CVE-2026-20941

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges …

Fix: 10.0.26100.7623 / 10.0.26100.32230+
Fix from $1,950 2026-01-13
Windows 11 24h2 HIGH 7.8
CVE-2025-60710 KEV

Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges …

Fix: 10.0.26100.7392 / 10.0.26200.7392+
Fix from $1,950 2025-11-11
Windows 10 1607 MEDIUM 5.5
CVE-2025-59510

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to d…

Fix: 10.0.14393.8594 / 10.0.17763.8027+
Fix from $1,600 2025-11-11
Xbox Gaming Services HIGH 7.8
CVE-2025-59281

Improper link resolution before file access ('link following') in XBox Gaming Services allows an authorized attacker to elevate privileges locally.

Fix: 31.105.17001.0+
Fix from $1,950 2025-10-14
Windows 11 24h2 HIGH 7.8
CVE-2025-59241

Improper link resolution before file access ('link following') in Windows Health and Optimized Experiences Service allows an authorized attacker to e…

Fix: 10.0.26100.6899 / 10.0.26200.6899+
Fix from $1,950 2025-10-14
.net HIGH 7.3
CVE-2025-55247

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Fix: 8.0.21 / 9.0.10+
Fix from $1,950 2025-10-14
Xbox Gaming Services HIGH 7.8
CVE-2025-55245

Improper link resolution before file access ('link following') in Xbox allows an authorized attacker to elevate privileges locally.

Fix: 30.104.13001.0+
Fix from $1,950 2025-09-09
Autoupdate HIGH 7.8
CVE-2025-55317

Improper link resolution before file access ('link following') in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges loca…

Fix: 4.80+
Fix from $1,950 2025-09-09
Visual Studio HIGH 8.8
CVE-2025-49739

Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Fix: 15.9.75 / 16.11.49+
Fix from $1,950 2025-07-08
Pc Manager HIGH 7.8
CVE-2025-49738

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Fix: 3.17.4.0+
Fix from $1,950 2025-07-08
Windows 10 1507 HIGH 7.3
CVE-2025-49680

Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.

Fix: 10.0.10240.21073 / 10.0.14393.8246+
Fix from $1,950 2025-07-08
Windows 10 1507 HIGH 7.8
CVE-2025-48820

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges…

Fix: 10.0.10240.21073 / 10.0.14393.8246+
Fix from $1,950 2025-07-08
Windows 10 1607 HIGH 7.8
CVE-2025-48799

Improper link resolution before file access ('link following') in Windows Update Service allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.8246 / 10.0.17763.7558+
Fix from $1,950 2025-07-08
Azure Service Fabric MEDIUM 6.0
CVE-2025-21195

Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevate privileges locally.

Fix: 10.1+
Fix from $1,600 2025-07-08
Windows 10 1507 HIGH 7.8
CVE-2025-33075

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Windows 10 1507 HIGH 7.3
CVE-2025-32721

Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.21034 / 10.0.14393.8148+
Fix from $1,950 2025-06-10
Edge Update HIGH 8.8
CVE-2025-47181

Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges…

Fix: 1.3.195.61+
Fix from $1,950 2025-05-22
Pc Manager HIGH 7.8
CVE-2025-29975

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Fix: 3.16.1.0+
Fix from $1,950 2025-05-13
Windows 10 1507 MEDIUM 5.5
CVE-2025-29837

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to disclose information locally.

Fix: 10.0.10240.21014 / 10.0.14393.8066+
Fix from $1,600 2025-05-13
Windows 10 1507 HIGH 7.8
CVE-2025-27727

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Windows 10 1507 HIGH 7.8
CVE-2025-21204EPSS 7%

Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.

Fix: 10.0.10240.20978 / 10.0.14393.7969+
Fix from $1,950 2025-04-08
Edge Update HIGH 7.8
CVE-2025-29795

Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges…

Fix: 1.3.195.45+
Fix from $1,950 2025-03-23
Windows Server 2016 HIGH 7.1
CVE-2025-25008

Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.

Fix: 10.0.14393.7876 / 10.0.17763.7009+
Fix from $1,950 2025-03-11
Windows 10 1507 HIGH 7.8
CVE-2025-21420

Windows Disk Cleanup Tool Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,950 2025-02-11
Windows 10 1507 HIGH 7.1
CVE-2025-21419

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,950 2025-02-11
Windows 10 1507 HIGH 7.1
CVE-2025-21391 KEV

Windows Storage Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,950 2025-02-11
Windows 10 1507 HIGH 7.8
CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,950 2025-02-11
Pc Manager HIGH 7.8
CVE-2025-21322

Microsoft PC Manager Elevation of Privilege Vulnerability

Fix: 3.15.4.0+
Fix from $1,950 2025-02-11
Windows 10 1507 MEDIUM 6.0
CVE-2025-21347

Windows Deployment Services Denial of Service Vulnerability

Fix: 10.0.10240.20915 / 10.0.14393.7785+
Fix from $1,600 2025-02-11
Azure Network Watcher MEDIUM 6.0
CVE-2025-21188

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

Fix: 1.4.3563.1+
Fix from $1,600 2025-02-11