CWE-59

Medium likelihood

Improper Link Resolution Before File Access ('Link Following')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

1,463 vulnerabilities with CWE-59
CVE-2025-20003 HIGH
Intel(R) Graphics Driver - Privilege Escalation
CVSS 8.2
CVE-2025-29975 HIGH
Microsoft PC Manager - Privilege Escalation
CVSS 7.8
CVE-2025-29837 MEDIUM
Windows Installer - Info Disclosure
CVSS 5.5
CVE-2025-1079 HIGH
Google Web Designer - RCE
CVSS 7.8
CVE-2025-22247 MEDIUM
VMware Tools - Info Disclosure
CVSS 6.1
CVE-2025-3224 HIGH
Docker Desktop for Windows <4.41.0 - Privilege Escalation
CVSS 7.8
CVE-2025-1697 HIGH
HP Touchpoint Analytics <4.2.2439 - Privilege Escalation
CVSS 7.8
CVE-2025-32817 MEDIUM
SonicWall Connect Tunnel - Path Traversal
CVSS 6.1
CVE-2025-29983 MEDIUM
Dell Trusted Device <7.0.3.0 - Privilege Escalation
CVSS 6.7
CVE-2025-23010 HIGH
SonicWall NetExtender - Path Traversal
CVSS 7.2
CVE-2025-27727 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20978 - Symlink Following
CVSS 7.8
CVE-2025-21204 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20978 - Symlink Following
CVSS 7.8
CVE-2025-30457 CRITICAL
macOS <13.7.5-15.4-14.7.5 - Path Traversal
CVSS 9.8
CVE-2025-24278 MEDIUM
Apple Macos < 13.7.5 - Symlink Following
CVSS 5.5
CVE-2025-24242 MEDIUM
Apple Macos < 15.4 - Symlink Following
CVSS 4.4
CVE-2025-30371 LOW
Metabase <0.52.16.4, <1.52.16.4, <0.53.8, <1.53.8 - SSRF
CVE-2025-29795 HIGH
Microsoft Edge Update < 1.3.195.45 - Symlink Following
CVSS 7.8
CVE-2025-1683 HIGH
1E Platform < 25.3 - Symlink Following
CVSS 7.8
CVE-2025-25008 HIGH
Microsoft Windows - Privilege Escalation
CVSS 7.1
CVE-2025-25185 HIGH
GPT Academic <3.91 - Info Disclosure
CVSS 7.5
CVE-2025-22480 HIGH
Dell Supportassist OS Recovery < 5.5.13.1 - Symlink Following
CVSS 7.0
CVE-2025-21420 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Symlink Following
CVSS 7.8
CVE-2025-21419 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Symlink Following
CVSS 7.1
CVE-2025-21391 HIGH KEV
Microsoft Windows 10 1507 < 10.0.10240.20915 - Symlink Following
CVSS 7.1
CVE-2025-21373 HIGH
Microsoft Windows 10 1507 < 10.0.10240.20915 - Symlink Following
CVSS 7.8
Details
Vulnerabilities 1,463
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits