Vulnerabilities > Improper Link Resolution Before File Access ('Link Following')

DATE CVE VULNERABILITY TITLE RISK
2024-09-17 CVE-2024-44178 Link Following vulnerability in Apple Macos
This issue was addressed with improved validation of symlinks.
local
low complexity
apple CWE-59
5.5
2024-08-31 CVE-2024-39578 Link Following vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability.
local
low complexity
dell CWE-59
6.3
2024-08-21 CVE-2024-5928 Link Following vulnerability in Vipre Advanced Security 12.0.1.214
VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability.
local
low complexity
vipre CWE-59
7.8
2024-07-29 CVE-2024-7249 Link Following vulnerability in Comodo Firewall 12.2.2.8012
Comodo Firewall Link Following Local Privilege Escalation Vulnerability.
local
low complexity
comodo CWE-59
7.8
2024-07-29 CVE-2024-7250 Link Following vulnerability in Comodo Internet Security 12.2.4.8032
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability.
local
low complexity
comodo CWE-59
7.8
2024-07-29 CVE-2024-7251 Link Following vulnerability in Comodo Internet Security 12.2.4.8032
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability.
local
low complexity
comodo CWE-59
7.8
2024-07-29 CVE-2024-7252 Link Following vulnerability in Comodo Internet Security 12.2.4.8032
Comodo Internet Security Pro cmdagent Link Following Local Privilege Escalation Vulnerability.
local
low complexity
comodo CWE-59
7.8
2024-07-25 CVE-2024-29069 Link Following vulnerability in Canonical Snapd
In snapd versions prior to 2.62, snapd failed to properly check the destination of symbolic links when extracting a snap.
local
low complexity
canonical CWE-59
7.3
2024-07-09 CVE-2024-38022 Link Following vulnerability in Microsoft products
Windows Image Acquisition Elevation of Privilege Vulnerability
local
high complexity
microsoft CWE-59
7.0
2024-06-20 CVE-2024-6147 Link Following vulnerability in HP Poly Plantronics HUB 3.24.2
Poly Plantronics Hub Link Following Local Privilege Escalation Vulnerability.
local
low complexity
hp CWE-59
7.8