Skip to content
BackEsc
Sign in

CWE-59 · weakness in File and Path Handling

Link Following

1,688 CVEs · 22 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
22
check available
1
likely to be exploited
15

Every one of the 1,688 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_k…CVE-2022-30333RARLAB · CVSS 9.8 · 99% likely

    RARLAB

  2. Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.CVE-2020-36193PEAR · CVSS 7.5 · 71% likely

    PEAR

  3. Windows Error Reporting Service Elevation of Privilege VulnerabilityCVE-2023-36874Microsoft · CVSS 7.8 · 44% likely

    Microsoft

  4. An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intellige…CVE-2020-0787Microsoft · CVSS 7.8 · 43% likely

    Microsoft

  5. An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Th…CVE-2019-0841Microsoft · CVSS 7.8 · 41% likely

    Microsoft

  6. Windows Installer Elevation of Privilege VulnerabilityCVE-2021-41379Microsoft · CVSS 5.5 · 19% likely

    Microsoft

  7. An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to…CVE-2019-1253Microsoft · CVSS 7.8 · 12% likely

    Microsoft

  8. The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.CVE-2015-1130Apple · CVSS 7.8 · 9.9% likely

    Apple

  9. Microsoft Defender Elevation of Privilege VulnerabilityCVE-2026-41091Microsoft · CVSS 7.8 · 8.2% likelycovered by CyberSIXT

    Microsoft

  10. An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Thi…CVE-2020-0683Microsoft · CVSS 7.8 · 7.7% likely

    Microsoft

  11. Windows Update Stack Elevation of Privilege VulnerabilityCVE-2026-81963Microsoft · CVSS 7.8 · 7.1% likelycovered by CyberSIXT

    Microsoft14 articles

  12. Windows Elevation of Privilege VulnerabilityCVE-2019-1064Microsoft · CVSS 7.8 · 6.9% likely

    Microsoft

  13. Task Scheduler Elevation of Privilege VulnerabilityCVE-2019-1069Microsoft · CVSS 7.8 · 6.2% likely

    Microsoft

  14. The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file w…CVE-2015-5287Red Hat · CVSS 7.8 · 5.0% likelycovered by CyberSIXT

    Red Hat5 articles

  15. Host Process for Windows Tasks Elevation of Privilege VulnerabilityCVE-2025-60710Microsoft · CVSS 7.8 · 4.6% likelycovered by CyberSIXT

    Microsoft

  16. An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit…CVE-2019-1385Microsoft · CVSS 7.8 · 3.6% likely

    Microsoft

  17. An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vuln…CVE-2019-1315Microsoft · CVSS 7.8 · 3.5% likely

    Microsoft

  18. Windows User Profile Service Elevation of Privilege VulnerabilityCVE-2022-21919Microsoft · CVSS 7 · 2.6% likely

    Microsoft

  19. An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain executi…CVE-2020-0638Microsoft · CVSS 7.8 · 2.5% likely

    Microsoft

  20. Windows Storage Elevation of Privilege VulnerabilityCVE-2025-21391Microsoft · CVSS 7.1 · 2.3% likely

    Microsoft

  21. An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Th…CVE-2019-1129Microsoft · CVSS 7.8 · 1.8% likely

    Microsoft

  22. An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Th…CVE-2019-1130Microsoft · CVSS 7.8 · 1.7% likely

    Microsoft

  23. Autonomy Ultraseek - Open RedirectCVE-2009-034711% likely
  24. malicious repositories can execute remote code while cloningCVE-2021-21300git · CVSS 8 · 89% likely

    Git

  25. In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.CVE-2021-3261073% likely
  26. An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…CVE-2019-0572Microsoft · 25% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in