Insecure Operation on Windows Junction / Mount Point

Root.Mkdir(All) can follow junctions out of the root on Windows in os

• Pre-auth

go standard library · osOct 8, 2026

Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

• Local privilege escalation

gen digital · norton secure vpnMay 4, 2026

Local privilege escalation in ESET products for Windows

• Local privilege escalation

eset, spol. s r.o. · eset nod32 antivirusSep 27, 2024

Vagrant’s Windows Installer Allowed Directory Junction Write

hashicorp · vagrantOct 27, 2023

Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory.

• Pre-auth

samsung · galaxy buds managerJun 4, 2024

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount

• Local privilege escalation

dell · alienware updateJun 23, 2023

Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)

sap · businessobjectsSep 11, 2023

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction /

dell · alienware updateJun 23, 2023

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in

dell · alienware updateFeb 10, 2023

DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability.

dell · update package frameworkFeb 6, 2024

Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point.

dell · display managerFeb 6, 2024

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting

• Local privilege escalation

amd · uprofMay 13, 2025

Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnera

• Local privilege escalation

dell · inventory collector clientJun 9, 2026

Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows attacker to create arbitrary directory.

• Denial of service

samsung mobile · samsung live wallpaper pcJun 4, 2024

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may ina

nvidia · geforce experienceFeb 6, 2023

Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability.

• Denial of service

dell · digital deliverySep 8, 2023

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locati

• Local privilege escalation

veeam · agent for windowsOct 7, 2026

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation.

dell · command \| intel vpro out of bandFeb 13, 2023

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstall

dell · command \| integration suite for system centerFeb 13, 2023