CWE-59
Medium likelihoodImproper Link Resolution Before File Access ('Link Following')
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
1,613 vulnerabilities with CWE-59
CVE-2024-7237
HIGH
AVG AntiVirus Free - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-7236
MEDIUM
AVG AntiVirus Free - Denial of Service via Symbolic Link Attack in Installer
CVSS 5.5
CVE-2024-7235
MEDIUM
AVG AntiVirus Free - Denial of Service via Symbolic Link Abuse
CVSS 5.5
CVE-2024-7234
HIGH
AVG AntiVirus Free - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-7233
HIGH
Avast Free Antivirus - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-7232
HIGH
Avast Free Antivirus - Local Privilege Escalation via Symbolic Link Abuse in AvastSvc
CVSS 7.8
CVE-2024-7231
HIGH
Avast Cleanup Premium - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-7230
HIGH
Avast Cleanup Premium - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-7229
HIGH
Avast Cleanup Premium - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-7228
MEDIUM
Avast Free Antivirus - Denial of Service via Symbolic Link Abuse
CVSS 5.5
CVE-2024-7227
HIGH
Avast Free Antivirus - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-9766
HIGH
Wacom Center < 6.4.7 - Local Privilege Escalation via Symbolic Link Attack
CVSS 7.8
CVE-2024-6260
HIGH
Malwarebytes Antimalware - Privilege Escalation
CVSS 7.8
CVE-2024-6233
HIGH
Check Point ZoneAlarm Extreme Security - Privilege Escalation
CVSS 7.8
CVE-2024-30377
HIGH
G DATA Total Security < 25.5.18.333 - Local Privilege Escalation via Symbolic Link Abuse
CVSS 7.8
CVE-2024-1868
HIGH
G DATA Total Security < 25.5.17.355 - Local Privilege Escalation via Symbolic Link
CVSS 7.8
CVE-2024-1867
HIGH
G DATA Total Security < 25.5.17.355 - Local Privilege Escalation via Symbolic Link Abuse in Backup Service
CVSS 7.8
CVE-2024-48862
CRITICAL
QuLog Center 1.7.0.800-1.7.0.830 - Unauthenticated Path Traversal and Arbitrary File Write via Link Following
CVSS 9.8
CVE-2024-52522
MEDIUM
rclone 1.59.0-1.68.1 - Privilege Escalation via Symlink Permission Manipulation
CVE-2024-51721
HIGH
SecuSUITE <5.0.420 - Code Injection
CVSS 7.3
CVE-2024-49051
HIGH
Microsoft PC Manager < 3.14.10.0 - Elevation of Privilege via Improper Link Resolution
CVSS 7.8
CVE-2024-10007
CRITICAL
GitHub Enterprise Server < 3.11.17 - Authenticated Path Collision and Remote Code Execution via ghe-firejail Path
CVSS 9.1
CVE-2024-6868
CRITICAL
mudler/LocalAI <2.17.1 - Code Injection
CVSS 9.8
CVE-2024-44273
MEDIUM
iPadOS < 18.1 - Improper Link Resolution Before File Access
CVSS 5.5
CVE-2024-44264
MEDIUM
macOS < 13.7.1, < 14.7.1, < 15.1 - Symlink Validation Bypass
CVSS 5.5
Details
Vulnerabilities
1,613
Exploit Likelihood
Medium