CWE-59 Improper Link Resolution Before File Access ('Link Following')
baseThe product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (2368)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-81963US | high7.8OT critical | KEV | ||
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2026-41091US | —OT critical | KEV | ||
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-60710US | —OT critical | KEV | ||
Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally. | ||||
| CVE-2025-48384US | —OT critical | KEV | ||
Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading… | ||||
| CVE-2025-21391US | —OT critical | KEV | ||
Windows Storage Elevation of Privilege Vulnerability | ||||
| CVE-2024-57728US | high7.2OT critical | KEV | ||
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This… | ||||
| CVE-2023-36874US | —OT critical | KEV | ||
Windows Error Reporting Service Elevation of Privilege Vulnerability | ||||
| CVE-2022-30333US | high7.5OT critical | KEV | ||
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_ke… | ||||
| CVE-2022-21999US | medium4.6OT critical | KEV | ||
Windows Print Spooler Elevation of Privilege Vulnerability | ||||
| CVE-2022-21919US | medium6.9OT critical | KEV | ||
Windows User Profile Service Elevation of Privilege Vulnerability | ||||
| CVE-2021-41379US | medium4.6OT critical | KEV | ||
Windows Installer Elevation of Privilege Vulnerability | ||||
| CVE-2020-36193US | high7.5OT critical | KEV | ||
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. | ||||
| CVE-2020-0787US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligen… | ||||
| CVE-2020-0683US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This… | ||||
| CVE-2020-0638US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain executio… | ||||
| CVE-2019-1385US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit… | ||||
| CVE-2019-1315US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulne… | ||||
| CVE-2019-1253US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to g… | ||||
| CVE-2019-1130US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Thi… | ||||
| CVE-2019-1129US | high7.8OT critical | KEV | ||
An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Thi… | ||||
04
attack patterns (4)
CAPEC attack patterns that exploit this.
05
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan