CWE-59

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalation privil

The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be

Dell Trusted Device, versions prior to 7.0.3.0, contain an Improper Link Resolution Before File Access ('Link Following'

Dell Alienware Command Center 5.x (AWCC), versions prior to 5.10.2.0, contains an Improper Link Resolution Before File A

Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software a

Dell Encryption, versions prior to 11.12.1, contain an Improper Link Resolution Before File Access ('Link Following') vu

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sequoia 15.6. A w

n8n is a workflow automation platform. Before 1.106.0, a symlink traversal vulnerability was discovered in the Read/Writ

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS

filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use (TOCTO

The configuration initialization tool in OpenVPN 3 Linux v20 through v24 on Linux allows a local attacker to use symlink

text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Loc

A vulnerability has been found in Ugreen DH2100+ up to 5.3.0. This affects an unknown function of the component USB Hand

A Improper Link Resolution vulnerability (CWE-59) in the SonicWall Connect Tunnel Windows (32 and 64 bit) client, this r

VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

Windows Deployment Services Denial of Service Vulnerability

Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevat

A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authen

Windows Event Tracing Denial of Service Vulnerability

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 1

This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 18.3 and iPadOS 18.3, iPadOS 17.

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 1

Improper link resolution before file access ('link following') in Windows Installer allows an authorized attacker to dis

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 1

os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a danglin

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.1. An app may be ab

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. Versions 3.25.23 and below contain a vul

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26

This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 26.1 and iPadOS 26.1, macOS Se

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 1

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma

Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allow

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Tahoe 26.1. A malicious app ma

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Tahoe 26.1. An app may be ab

Symlink following in the installer for some Zoom apps for macOS before version 6.1.5 may allow an authenticated user to

The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redire

KubeVirt is a virtual machine management add-on for Kubernetes. In versions before 1.5.3 and 1.6.1, the virt-handler doe

Improper handling of symbolic links in the TeamViewer Full Client and Host for Windows — in versions prior to 15.70 of T

A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13. This vulnerability affects

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 1

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app with root

Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to con

7-Zip before 25.01 does not always properly handle symbolic links during extraction.

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.2, macOS Sonoma 1

tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrar

Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and

Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib modu