Skip to content

CWE-64 · weakness in File and Path Handling

Windows Shortcut Following (.LNK)

9 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

  1. Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privile…CVE-2025-52521Trend Micro, Inc. · CVSS 7.8 · 0.4% likely

    Trend Micro

  2. Duo Authentication Proxy Installer Denial of Service VulnerabilityCVE-2021-1492Cisco · CVSS 6.6 · 0.3% likely

    Cisco

  3. Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files includin…CVE-2025-53503Trend Micro, Inc. · CVSS 7.8 · 0.3% likely

    Trend Micro

  4. Deletion of arbitrary files vulnerability in Snow Agent for WindowsCVE-2021-41562Snow · CVSS 6.1 · 0.3% likely

    Snow Software

  5. Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker t…CVE-2025-48443Trend Micro, Inc. · CVSS 6.7 · 0.2% likely

    Trend Micro

  6. Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISCVE-2025-7376Mitsubishi Electric Corporation · CVSS 5.9 · 0.2% likely

    Mitsubishi Electric

  7. Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privile…CVE-2025-49385Trend Micro, Inc. · CVSS 7.8 · 0.2% likely

    Trend Micro

  8. Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privile…CVE-2025-49384Trend Micro, Inc. · CVSS 7.8 · 0.2% likely

    Trend Micro

  9. Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportun…CVE-2025-52837Trend Micro, Inc. · CVSS 7.8 · 0.2% likely

    Trend Micro

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in