CWE-64 · 10 records
Windows Shortcut Following (.LNK)
CVEs in this class
10 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2025-53503No exploit | Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delettrendmicro · cleaner one · CWE-64 | High7.8 | — | 0.2% | Jul 10, 2025 |
31Monitor | CVE-2025-52837No exploit | Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability thtrendmicro · password manager · CWE-64 | High7.8 | — | 0.1% | Jul 10, 2025 |
28Monitor | CVE-2025-52521No exploit | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local atttrendmicro · maximum security 2022 · CWE-64 | High7.1 | — | 0.3% | Jul 10, 2025 |
28Monitor | CVE-2021-1492No exploit | Duo Authentication Proxy Installer Denial of Service Vulnerabilityduo · authentication proxy · CWE-64 | High7.1 | — | 0.2% | Mar 25, 2021 |
28Monitor | CVE-2025-49385No exploit | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local atttrendmicro · maximum security 2022 · CWE-64 | High7.1 | — | 0.1% | Jun 17, 2025 |
28Monitor | CVE-2025-49384No exploit | Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local atttrendmicro · maximum security 2022 · CWE-64 | High7.1 | — | 0.1% | Jun 17, 2025 |
26Monitor | CVE-2025-48443No exploit | Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerabiltrendmicro · password manager · CWE-64 | Medium6.6 | — | 0.2% | Jun 17, 2025 |
24Monitor | CVE-2021-41562No exploit | Deletion of arbitrary files vulnerability in Snow Agent for Windowssnowsoftware · snow inventory agent · CWE-64 | Medium6.1 | — | 0.2% | Nov 3, 2021 |
23Monitor | CVE-2025-7376No exploit | Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISmitsubishi electric corporation · genesis64 · CWE-64 | Medium5.9 | — | 0.2% | Aug 6, 2025 |
22Monitor | GHSA-87mg-h5r3-hw88No exploit | Cross-Site Scripting in bootboxnpm · bootbox · CWE-64 | Medium5.5 | — | — | May 30, 2019 |
- CVE-2025-5350331Monitor
Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delet
HighCVSS 7.8No exploitEPSS 0%trendmicro · cleaner oneJul 10, 2025
- CVE-2025-5283731Monitor
Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability th
HighCVSS 7.8No exploitEPSS 0%trendmicro · password managerJul 10, 2025
- CVE-2025-5252128Monitor
Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att
HighCVSS 7.1No exploitEPSS 0%trendmicro · maximum security 2022Jul 10, 2025
- CVE-2021-149228Monitor
Duo Authentication Proxy Installer Denial of Service Vulnerability
HighCVSS 7.1No exploitEPSS 0%duo · authentication proxyMar 25, 2021
- CVE-2025-4938528Monitor
Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att
HighCVSS 7.1No exploitEPSS 0%trendmicro · maximum security 2022Jun 17, 2025
- CVE-2025-4938428Monitor
Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local att
HighCVSS 7.1No exploitEPSS 0%trendmicro · maximum security 2022Jun 17, 2025
- CVE-2025-4844326Monitor
Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerabil
MediumCVSS 6.6No exploitEPSS 0%trendmicro · password managerJun 17, 2025
- CVE-2021-4156224Monitor
Deletion of arbitrary files vulnerability in Snow Agent for Windows
MediumCVSS 6.1No exploitEPSS 0%snowsoftware · snow inventory agentNov 3, 2021
- CVE-2025-737623Monitor
Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESIS
MediumCVSS 5.9No exploitEPSS 0%mitsubishi electric corporation · genesis64Aug 6, 2025
- GHSA-87mg-h5r3-hw8822Monitor
Cross-Site Scripting in bootbox
MediumCVSS 5.5No exploitnpm · bootboxMay 30, 2019