CWE-59 Improper Link Resolution Before File Access ('Link Following')
baseThe product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
01
übergeordnete Schwächen
Übergeordnete Klassen, zu denen dies gehört.
02
untergeordnete Schwächen
Spezifischere Einträge unterhalb dieses.
03
Schwachstellen (2368)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-81963US | high7.8OT kritisch | KEV | ||
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-41091US | —OT kritisch | KEV | ||
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-60710US | —OT kritisch | KEV | ||
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-48384US | —OT kritisch | KEV | ||
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading… | ||||
| CVE-2025-21391US | —OT kritisch | KEV | ||
Windows Storage Elevation of Privilege Vulnerability | ||||
| CVE-2024-57728US | high7.2OT kritisch | KEV | ||
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This… | ||||
| CVE-2023-36874US | —OT kritisch | KEV | ||
Windows Error Reporting Service Elevation of Privilege Vulnerability | ||||
| CVE-2022-30333US | high7.5OT kritisch | KEV | ||
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_ke… | ||||
| CVE-2022-21999US | medium4.6OT kritisch | KEV | ||
Windows Print Spooler Elevation of Privilege Vulnerability | ||||
| CVE-2022-21919US | medium6.9OT kritisch | KEV | ||
Windows User Profile Service Elevation of Privilege Vulnerability | ||||
| CVE-2021-41379US | medium4.6OT kritisch | KEV | ||
Windows Installer Elevation of Privilege Vulnerability | ||||
| CVE-2020-36193US | high7.5OT kritisch | KEV | ||
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | ||||
| CVE-2020-0787US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligen… | ||||
| CVE-2020-0683US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This… | ||||
| CVE-2020-0638US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain executio… | ||||
| CVE-2019-1385US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit… | ||||
| CVE-2019-1315US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulne… | ||||
| CVE-2019-1253US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to g… | ||||
| CVE-2019-1130US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Thi… | ||||
| CVE-2019-1129US | high7.8OT kritisch | KEV | ||
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Thi… | ||||
04
Angriffsmuster (4)
CAPEC-Angriffsmuster, die dies ausnutzen.
05
Quelle
Wo diese Definition veröffentlicht ist.
MITREUS
scry
Schwächen wie diese tauchen in realen, ausnutzbaren Angriffsflächen auf. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan