Vulnerabilities > Improper Link Resolution Before File Access ('Link Following')

DATE CVE VULNERABILITY TITLE RISK
2019-09-11 CVE-2019-1270 Link Following vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-59
5.5
2019-09-11 CVE-2019-1267 Link Following vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Microsoft Compatibility Appraiser where a configuration file, with local privileges, is vulnerable to symbolic link and hard link attacks, aka 'Microsoft Compatibility Appraiser Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-59
7.8
2019-08-29 CVE-2019-11396 Link Following vulnerability in Avira Free Security Suite and Software Updater
An issue was discovered in Avira Free Security Suite 10.
local
low complexity
avira CWE-59
7.8
2019-08-26 CVE-2018-20990 Link Following vulnerability in TAR Project TAR
An issue was discovered in the tar crate before 0.4.16 for Rust.
network
low complexity
tar-project CWE-59
7.5
2019-08-20 CVE-2018-1634 Link Following vulnerability in IBM Informix Dynamic Server 12.10
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in infos.DBSERVERNAME.
local
low complexity
ibm CWE-59
6.7
2019-08-20 CVE-2018-1633 Link Following vulnerability in IBM Informix Dynamic Server 12.10
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onsrvapd.
local
low complexity
ibm CWE-59
6.7
2019-08-20 CVE-2018-1632 Link Following vulnerability in IBM Informix Dynamic Server 12.10
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in .infxdirs.
local
low complexity
ibm CWE-59
6.7
2019-08-20 CVE-2018-1631 Link Following vulnerability in IBM Informix Dynamic Server 12.1
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in oninit mongohash.
local
low complexity
ibm CWE-59
6.7
2019-08-20 CVE-2018-1630 Link Following vulnerability in IBM Informix Dynamic Server 12.1
IBM Informix Dynamic Server Enterprise Edition 12.1 could allow a local user logged in with database administrator user to gain root privileges through a symbolic link vulnerability in onmode.
local
low complexity
ibm CWE-59
6.7
2019-08-06 CVE-2019-5683 Link Following vulnerability in Nvidia GPU Driver
NVIDIA Windows GPU Display Driver (all versions) contains a vulnerability in the user mode video driver trace logger component.
local
low complexity
nvidia CWE-59
7.8