Improper Link Resolution Before File Access ('Link Following')

SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a

• RCE

simple-help · simplehelpJan 15, 2025

Windows Error Reporting Service Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 10 1507Jul 11, 2023

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l

• Local privilege escalation

microsoft · windows 10 1507Mar 12, 2020

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El

• Local privilege escalation

microsoft · windows 10 1703Apr 9, 2019

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerab

• Local privilege escalation

microsoft · windows 10 1703Sep 11, 2019

The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileg

• Auth bypass
• Local privilege escalation

apple · mac os xApr 10, 2015

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Ele

• Local privilege escalation

microsoft · windows 10 1507Feb 11, 2020

Windows Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 10 1607Jun 12, 2019

Task Scheduler Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 10 1507Jun 12, 2019

Git allows arbitrary code execution through broken config quoting

• RCE

git-scm · gitJul 8, 2025

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain priv

• Local privilege escalation

redhat · automatic bug reporting toolDec 7, 2015

Host Process for Windows Tasks Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 11 24h2Nov 11, 2025

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulti

• Local privilege escalation

microsoft · windows 10 1709Nov 12, 2019

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Report

• Local privilege escalation

microsoft · windows 10 1607Oct 10, 2019

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an at

• Local privilege escalation

microsoft · windows 10 1709Jan 14, 2020

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El

• Local privilege escalation

microsoft · windows 10 1703Jul 15, 2019

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows El

• Local privilege escalation

microsoft · windows 10 1507Jul 15, 2019

Microsoft Defender Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · malware protection engineMay 20, 2026

Windows Update Stack Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 11 23h2Sep 8, 2026

Windows User Profile Service Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 10 1507Jan 11, 2022

Windows Storage Elevation of Privilege Vulnerability

• Local privilege escalation

microsoft · windows 10 1507Feb 11, 2025

Windows Installer Elevation of Privilege Vulnerability

• Local privilege escalation
• Denial of service

microsoft · windows 10 1507Nov 9, 2021

malicious repositories can execute remote code while cloning

• Pre-auth

git-scm · gitMar 9, 2021

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

php · archive tarJul 30, 2021

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with

kubernetes · kubernetesMar 13, 2018