CWE-59

Medium likelihood

Improper Link Resolution Before File Access ('Link Following')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

1,463 vulnerabilities with CWE-59
CVE-2026-2627 HIGH
Softland FBackup <9.9 - Path Traversal
CVSS 7.8
CVE-2026-26225 HIGH
Intego Personal Backup - Privilege Escalation
CVE-2026-20610 HIGH
macOS Tahoe <26.3 - Privilege Escalation
CVSS 7.8
CVE-2026-21517 MEDIUM
Windows App for Mac - Privilege Escalation
CVSS 4.7
CVE-2026-21419 MEDIUM
Dell Display and Peripheral Manager <2.2 - Privilege Escalation
CVSS 6.6
CVE-2026-24884 HIGH
NPM Compressing < 2.0.1 - Symlink Following
CVSS 8.4
CVE-2026-23563 MEDIUM
TeamViewer DEX - 1E Client <26.1 - Privilege Escalation
CVSS 5.7
CVE-2026-24842 HIGH
Isaacs Tar < 7.5.7 - Path Traversal
CVSS 8.2
CVE-2026-24056 MEDIUM
pnpm <10.28.2 - Info Disclosure
CVSS 6.5
CVE-2026-23893 MEDIUM
openCryptoki >=2.3.2 - Privilege Escalation
CVSS 6.8
CVE-2026-24047 MEDIUM
Backstage <0.1.17 - Path Traversal
CVSS 6.3
CVE-2026-24046 HIGH
Backstage - Path Traversal
CVSS 7.1
CVE-2026-20941 HIGH
Host Process for Windows Tasks - Privilege Escalation
CVSS 7.8
CVE-2026-22702 MEDIUM
Pypi Virtualenv < 20.36.1 - Race Condition
CVSS 4.5
CVE-2026-22701 MEDIUM
Pypi Filelock < 3.20.3 - Race Condition
CVSS 5.3
CVE-2025-43257 HIGH
Apple macOS <15.6 - Sandbox Escape
CVSS 8.7
CVE-2025-66680 HIGH
WiseCleaner Wise Force Deleter <=7.3.2 - Arbitrary File Deletion
CVSS 7.1
CVE-2025-48582 HIGH
Android - Privilege Escalation
CVSS 8.4
CVE-2025-63946 HIGH
Tencent PC Manager <17.10.28554.205 - Privilege Escalation
CVSS 7.4
CVE-2025-63945 HIGH
Tencent iOA thru 210.9.28693.621001 - Privilege Escalation
CVSS 7.4
CVE-2025-66277 CRITICAL
QNAP OS - Path Traversal
CVSS 9.8
CVE-2025-62676 HIGH
Fortinet Forticlient < 7.2.13 - Symlink Following
CVSS 7.1
CVE-2025-15314 MEDIUM
Tanium - Path Traversal
CVSS 5.5
CVE-2025-15313 MEDIUM
Tanium EUSS - Path Traversal
CVSS 5.5
CVE-2025-15310 HIGH
Tanium Patch Endpoint Tools - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities 1,463
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits