Insecure Operation on Windows Junction / Mount Point

Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.

1. Root.Mkdir(All) can follow junctions out of the root on Windows in osCVE-2026-56857Go standard library · CVSS 9.8 · 0.6% likely

   Go standard library

2. Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)CVE-2023-40623SAP_SE · CVSS 6.2 · 0.4% likely

   SAP

3. Arbitrary directory creation in GalaxyBudsManager PC prior to version 2.1.240315.51 allows attacker to create arbitrary directory.CVE-2024-20887Samsung Mobile · CVSS 6.2 · 0.3% likely

   Samsung

4. Vagrant’s Windows Installer Allowed Directory Junction WriteCVE-2023-5834HashiCorp · CVSS 3.8 · 0.2% likely

   HashiCorp

5. Local privilege escalation in ESET products for WindowsCVE-2024-7400ESET, spol. s r.o. · CVSS 8.5 · 0.2% likely

   ESET, spol. s r.o.

6. NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked loc…CVE-2022-42291NVIDIA · CVSS 8.2 · 0.2% likely

   NVIDIA

7. Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could potentially exploit this…CVE-2023-32474Dell · CVSS 6.6 · 0.2% likely

   Dell

8. Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious…CVE-2023-28065Dell · CVSS 6.7 · 0.2% likely

   Dell

9. Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malic…CVE-2023-28071Dell · CVSS 6.3 · 0.2% likely

   Dell

10. Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may po…CVE-2023-23697Dell · CVSS 4.7 · 0.2% likely

    Dell

11. Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component. A local malicio…CVE-2023-23698Dell · CVSS 5.5 · 0.2% likely

    Dell

12. Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious…CVE-2023-24572Dell · CVSS 4.7 · 0.2% likely

    Dell

13. Arbitrary directory creation in Samsung Live Wallpaper PC prior to version 3.3.8.0 allows attacker to create arbitrary directory.CVE-2024-20886Samsung Mobile · CVSS 6.2 · 0.2% likely

    Samsung

14. A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.CVE-2024-36340AMD · CVSS 6.6 · 0.2% likely

    AMD

15. DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability…CVE-2023-32454Dell · CVSS 6.3 · 0.2% likely

    Dell

16. Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit th…CVE-2023-32470Dell · CVSS 5 · 0.2% likely

    Dell

17. Privilege escalation during the installation of Norton Secure VPN via the Microsoft StoreCVE-2025-58074Gen Digital · CVSS 8.8 · 0.1% likely

    Gen Digital

18. This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.CVE-2025-64391Veeam · CVSS 4.1 · 0.1% likely

    Veeam

19. A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to p…CVE-2025-64394Veeam · CVSS 4.3 · 0.1% likely

    Veeam

20. Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with…CVE-2026-41116Dell · CVSS 6.3 · 0.1% likely

    Dell

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.