Skip to content

CWE-65 · weakness in File and Path Handling

Windows Hard Link

7 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Check Point Endpoint Security Client for Windows versions earlier than E86.40 copy files for forensics reports from a directory with low privileges. An attacker can replace those…CVE-2022-23742Checkpoint · CVSS 7.8 · 4.2% likely

    Check Point

  2. ZoneAlarm Firewall and Antivirus products before version 15.8.109.18436 allow an attacker who already has access to the system to execute code at elevated privileges through a com…CVE-2020-6013Check Point ZoneAlarm · 1.6% likely
  3. A hard-link created from log file archive of Check Point ZoneAlarm up to 15.4.062 or Check Point Endpoint Security client for Windows before E80.96 to any file on the system will…CVE-2019-8452Check Point ZoneAlarm · 1.0% likely
  4. Windows Compressed Folder Information Disclosure VulnerabilityCVE-2026-70019Microsoft · CVSS 6.5 · 1.0% likely

    Microsoft

  5. An insecure file access vulnerability exists in CA Client Automation 14.0, 14.1, 14.2, and 14.3 Agent for Windows that can allow a local attacker to gain escalated privileges.CVE-2019-19231CA Technologies, Broadcom Company · CVSS 7.3 · 0.6% likely
  6. A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked fi…CVE-2019-8455Check Point ZoneAlarm · 0.4% likely
  7. A local attacker can create a hard-link between a file to which the Check Point Endpoint Security client for Windows before E80.96 writes and another BAT file, then by impersonati…CVE-2019-8454Check Point · 0.3% likely

    Check Point

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in