İçeriğe atla
Noroxi

CWE-1386 · 19 kayıt

Insecure Operation on Windows Junction / Mount Point

Bu sınıftaki CVE’ler

19 kayıt

  • CVE-2026-56857
    39İzleyin

    Root.Mkdir(All) can follow junctions out of the root on Windows in os

    KritikCVSS 9,8İstismar yokEPSS %0

    go standard library · os8 Eki 2026

  • CVE-2025-58074
    35İzleyin

    Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

    YüksekCVSS 8,8İstismar yokEPSS %0

    gen digital · norton secure vpn4 May 2026

  • CVE-2024-7400
    34İzleyin

    Local privilege escalation in ESET products for Windows

    YüksekCVSS 8,5İstismar yokEPSS %0

    eset, spol. s r.o. · eset nod32 antivirus27 Eyl 2024

  • CVE-2023-5834
    31İzleyin

    Vagrant’s Windows Installer Allowed Directory Junction Write

    YüksekCVSS 7,8İstismar yokEPSS %0

    hashicorp · vagrant27 Eki 2023

  • CVE-2024-20887
    30İzleyin

    Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory.

    YüksekCVSS 7,5İstismar yokEPSS %0

    samsung · galaxy buds manager4 Haz 2024

  • CVE-2023-28065
    29İzleyin

    Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount

    YüksekCVSS 7,3İstismar yokEPSS %0

    dell · alienware update23 Haz 2023

  • CVE-2023-40623
    28İzleyin

    Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)

    YüksekCVSS 7,1İstismar yokEPSS %0

    sap · businessobjects11 Eyl 2023

  • CVE-2023-28071
    28İzleyin

    Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction /

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · alienware update23 Haz 2023

  • CVE-2023-23698
    28İzleyin

    Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · alienware update10 Şub 2023

  • CVE-2023-32454
    28İzleyin

    DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability.

    YüksekCVSS 7,1İstismar yokEPSS %0

    dell · update package framework6 Şub 2024

  • CVE-2023-32474
    26İzleyin

    Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point.

    OrtaCVSS 6,6İstismar yokEPSS %0

    dell · display manager6 Şub 2024

  • CVE-2024-36340
    26İzleyin

    A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting

    OrtaCVSS 6,6İstismar yokEPSS %0

    amd · uprof13 May 2025

  • CVE-2026-41116
    25İzleyin

    Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnera

    OrtaCVSS 6,3İstismar yokEPSS %0

    dell · inventory collector client9 Haz 2026

  • CVE-2024-20886
    24İzleyin

    Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows attacker to create arbitrary directory.

    OrtaCVSS 6,2İstismar yokEPSS %0

    samsung mobile · samsung live wallpaper pc4 Haz 2024

  • CVE-2022-42291
    22İzleyin

    NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may ina

    OrtaCVSS 5,5İstismar yokEPSS %0

    nvidia · geforce experience6 Şub 2023

  • CVE-2023-32470
    22İzleyin

    Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability.

    OrtaCVSS 5,5İstismar yokEPSS %0

    dell · digital delivery8 Eyl 2023

  • CVE-2025-64391
    16İzleyin

    This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locati

    OrtaCVSS 4,1İstismar yokEPSS %0

    veeam · agent for windows7 Eki 2026

  • CVE-2023-23697
    13İzleyin

    Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation.

    DüşükCVSS 3,3İstismar yokEPSS %0

    dell · command \| intel vpro out of band13 Şub 2023

  • CVE-2023-24572
    13İzleyin

    Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstall

    DüşükCVSS 3,3İstismar yokEPSS %0

    dell · command \| integration suite for system center13 Şub 2023

Tüm zafiyet sınıfları