CWE-69 · 3 records
Improper Handling of Windows ::DATA Alternate Data Stream
CVEs in this class
3 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-3941No exploit | Improper Handling of Windows: DATA Alternate Data Streamtridium · niagara · CWE-69 | Critical9.8 | — | 0.5% | May 22, 2025 |
35Monitor | CVE-2024-43033No exploit | JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to Attachmejpress · jpress · CWE-69 | High8.8 | — | 0.9% | Aug 21, 2024 |
34Monitor | CVE-2026-52792No exploit | Algernon: Server-side script source disclosure on Windows via NTFS filenamexyproto · algernon · CWE-69 | High8.7 | — | 0.6% | Aug 19, 2026 |
- CVE-2025-394139Monitor
Improper Handling of Windows: DATA Alternate Data Stream
CriticalCVSS 9.8No exploitEPSS 0%tridium · niagaraMay 22, 2025
- CVE-2024-4303335Monitor
JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to Attachme
HighCVSS 8.8No exploitEPSS 0%jpress · jpressAug 21, 2024
- CVE-2026-5279234Monitor
Algernon: Server-side script source disclosure on Windows via NTFS filename
HighCVSS 8.7No exploitEPSS 0%xyproto · algernonAug 19, 2026