#cwe-59

共收录 498 条相关情报。

漏洞预警2026-06-16 发布INFO

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ". We are working...

CVE-2026-50656

Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicl

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

安全公告2026-06-13 发布INFO

A symlink following vulnerability was found in the ABRT post-create event handler scripts in...

CVE-2026-54230

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts wr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-59 #severity:high

漏洞预警2026-06-13 发布HIGH

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_N...

CVE-2026-54230

CVE-2026-54230 是 libreport 库中 ABRT 后创建事件处理脚本的一个符号链接跟随漏洞。当事件脚本使用 shell 重定向写入输出文件时，未使用 O_NOFOLLOW 标志，若目标文件被替换为指向其他位置的符号链接，

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

安全公告2026-06-12 发布INFO

File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope

CVE-2026-54094

## Summary File Browser enforces per-user scope with `afero.NewBasePathFs(afero.NewOsFs(), scope)`, set up in `users/us

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-22 #cwe-59 #severity:medium

漏洞预警2026-06-12 发布INFO

Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote drag-and-drop source to overwrite or truncate arbitrary fi...

CVE-2026-54056

Kitty is a cross-platform GPU based terminal. In versions 0.47.0 and 0.47.1, `kitten dnd` can allow a malicious remote d

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-12 发布INFO

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability exists in kitty's file transmission protocol where a child ...

CVE-2026-54055

Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.2, a local privilege escalation vulnerability ex

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-367 #cwe-426

安全公告2026-06-11 发布INFO

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia...

CVE-2025-46293

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-59 #severity:medium

漏洞预警2026-06-11 发布INFO

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be able to access protected user data.

CVE-2025-46293

This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.4. An app may be ab

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-10 发布INFO

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overwrite vulnerability...

CVE-2026-45384

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-377

漏洞预警2026-06-10 发布HIGH

A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile() function uses os.chown() instead of os.lchown() and opens...

CVE-2026-11837

A local privilege escalation vulnerability was found in the ansible.posix authorized_key module. The module's keyfile()

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-06-09 发布INFO

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-50511

Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-09 发布INFO

Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker wit...

CVE-2026-44275

Dell/Alienware Purchased Apps, versions prior to 1.1.32.0, contain an Improper Link Resolution Before File Access ('Link

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-09 发布INFO

Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.

CVE-2026-45586

Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-09 发布INFO

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

CVE-2026-45491

Improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tamper

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-09 发布INFO

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.

CVE-2026-42989

Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate priv

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-09 发布INFO

Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local acce...

CVE-2026-28262

Dell iDRAC Tools, versions prior to 11.4.1.0, contains an Improper Link Resolution Before File Access ('Link Following')

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-04 发布INFO

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace boundary by supplying symlinks that resolve to files or dir...

CVE-2026-11322

Hermes WebUI prior to v0.51.221 contains a path traversal vulnerability that allows attackers to escape the workspace bo

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-04 发布INFO

Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned SSH key synchronization path used for customer FTP users...

CVE-2026-41236

Froxlor is open source server administration software. Version 2.3.6 contains a symlink-following flaw in the root-owned

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-02 发布INFO

Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in the generated package tarball. The file collection helpers...

CVE-2026-42795

Symlink following vulnerability in Gleam's Hex package export allows files outside the project root to be embedded in th

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-06-01 发布INFO

CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by...

CVE-2026-49135

CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to acces

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-377