共收录 498 条相关情报。
← 返回所有主题CVE-2026-72971
Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.
CVE-2026-70348
Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attac
CVE-2026-62832
Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized atta
CVE-2026-62812
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to e
CVE-2026-62807
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to e
CVE-2026-62803
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to e
CVE-2026-62776
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to e
CVE-2026-62761
Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to e
CVE-2026-61358
Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) al
CVE-2026-72694
A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low
CVE-2025-30240
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By
CVE-2025-30240
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploi
CVE-2026-71964
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component t
CVE-2026-63622
A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploi
CVE-2026-71964
CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component t
CVE-2026-70622
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function t
CVE-2026-70622
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function t
CVE-2026-15059
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traver
CVE-2026-19429
Jenkins FilePath.untarFrom() in all versions, including those with the CVE-2026-33001 patch applied, validates symlink d