Improper Resolution of Path Equivalence

Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Windows HTML Platforms Security Feature Bypass VulnerabilityCVE-2025-21269Microsoft · CVSS 4.3 · 4.5% likely

   Microsoft

2. Insecure parsing of Windows paths with a \??\ prefix in path/filepathCVE-2023-45283Go standard library · 3.3% likely

   Go standard library

3. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21247Microsoft · CVSS 4.3 · 3.1% likely

   Microsoft

4. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21219Microsoft · CVSS 4.3 · 3.0% likely

   Microsoft

5. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21189Microsoft · CVSS 4.3 · 2.9% likely

   Microsoft

6. Windows Deployment Services Information Disclosure VulnerabilityCVE-2024-30036Microsoft · CVSS 6.5 · 2.3% likely

   Microsoft

7. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21268Microsoft · CVSS 4.3 · 1.9% likely

   Microsoft

8. Windows Compressed Folder Remote Code Execution VulnerabilityCVE-2023-36396Microsoft · CVSS 7.8 · 1.7% likely

   Microsoft

9. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21332Microsoft · CVSS 4.3 · 1.5% likely

   Microsoft

10. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21329Microsoft · CVSS 4.3 · 1.5% likely

    Microsoft

11. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-21328Microsoft · CVSS 4.3 · 1.5% likely

    Microsoft

12. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2026-23674Microsoft · CVSS 7.5 · 1.4% likely

    Microsoft

13. An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated…CVE-2025-24470Fortinet · CVSS 8.1 · 1.3% likely

    Fortinet

14. WebDAV Elevation of Privilege VulnerabilityCVE-2026-102217Microsoft · CVSS 8.8 · 1.3% likely

    Microsoft

15. Incorrect detection of reserved device names on Windows in path/filepathCVE-2023-45284Go standard library · CVSS 5.3 · 1.1% likely

    Go standard library

16. Improper Resolution of Path Equivalence in microweber-dev/whmcs_pluginCVE-2022-0855microweber-dev · CVSS 7.4 · 1.0% likely
17. Windows SmartScreen Security Feature Bypass VulnerabilityCVE-2026-108463Microsoft · CVSS 8.8 · 1.0% likely

    Microsoft

18. MapUrlToZone Security Feature Bypass VulnerabilityCVE-2025-54107Microsoft · CVSS 4.3 · 1.0% likely

    Microsoft

19. Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution VulnerabilityCVE-2026-88136Microsoft · CVSS 8.8 · 1.0% likely

    Microsoft

20. Windows Security Zone Mapping Security Feature Bypass VulnerabilityCVE-2024-30073Microsoft · CVSS 7.8 · 0.9% likely

    Microsoft

21. Improper Path Equivalence Resolution in lunary-ai/lunaryCVE-2024-8765lunary-ai · CVSS 7.3 · 0.8% likely

    Lunary-Ai

22. Windows URL Moniker Security Feature Bypass VulnerabilityCVE-2026-73019Microsoft · CVSS 4.3 · 0.8% likely

    Microsoft

23. Improper Regex Path Matching in corydolphin/flask-corsCVE-2024-6839corydolphin · CVSS 4.3 · 0.7% likely

    Corydolphin

24. ASP.NET Core Security Feature Bypass VulnerabilityCVE-2026-114156Microsoft · CVSS 6.5 · 0.6% likely

    Microsoft

25. IBM DS8900F file manipulationCVE-2023-46169IBM · CVSS 6.5 · 0.5% likely

    IBM

26. filebrowser before v2.63.21 Access Rule Bypass via Path CanonicalizationCVE-2026-72835filebrowser · CVSS 6.8 · 0.5% likely

    Filebrowser

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.