CWE-59 · File and Path Handling
Link Following
1,688CVEs
22exploited
1with a public check
15likely (EPSS 10%+)
SortMost likely exploited
1,688 CVEs with CWE-59 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-30333In CISA KEVExploitedRARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_k…RARLAB · UnRAR · CVSS 9.8 · 2022-05-09 | 9.8 | 99% | 2022-05-09 |
| CVE-2020-36193In CISA KEVExploitedTar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.PEAR · Archive_Tar · CVSS 7.5 · 2021-01-18 | 7.5 | 71% | 2021-01-18 |
| CVE-2023-36874In CISA KEVExploitedWindows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-07-11 | 7.8 | 44% | 2023-07-11 |
| CVE-2020-0787In CISA KEVExploitedAn elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intellige…Microsoft · Windows · CVSS 7.8 · 2020-03-12 | 7.8 | 43% | 2020-03-12 |
| CVE-2019-0841In CISA KEVExploitedAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Th…Microsoft · Windows · CVSS 7.8 · 2019-04-09 | 7.8 | 41% | 2019-04-09 |
| CVE-2021-41379In CISA KEVExploitedWindows Installer Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 5.5 · 2021-11-10 | 5.5 | 19% | 2021-11-10 |
| CVE-2019-1253In CISA KEVExploitedAn elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to…Microsoft · Windows · CVSS 7.8 · 2019-09-11 | 7.8 | 12% | 2019-09-11 |
| CVE-2015-1130In CISA KEVExploitedThe XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.Apple · OS X · CVSS 7.8 · 2015-04-10 | 7.8 | 9.9% | 2015-04-10 |
| CVE-2026-41091In CISA KEVExploitedMicrosoft Defender Elevation of Privilege VulnerabilityMicrosoft · Microsoft Malware Protection Engine · CVSS 7.8 · 2026-05-20 | 7.8 | 8.2% | 2026-05-20 |
| CVE-2020-0683In CISA KEVExploitedAn elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. Thi…Microsoft · Windows · CVSS 7.8 · 2020-02-11 | 7.8 | 7.7% | 2020-02-11 |
| CVE-2026-81963In CISA KEVExploitedWindows Update Stack Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 23H2 · CVSS 7.8 · 2026-09-08 | 7.8 | 7.1% | 2026-09-08 |
| CVE-2019-1064In CISA KEVExploitedWindows Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1703 · CVSS 7.8 · 2019-06-12 | 7.8 | 6.9% | 2019-06-12 |
| CVE-2019-1069In CISA KEVExploitedTask Scheduler Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1703 · CVSS 7.8 · 2019-06-12 | 7.8 | 6.2% | 2019-06-12 |
| CVE-2015-5287In CISA KEVExploitedThe abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file w…Red Hat · Automatic Bug Reporting Tool · CVSS 7.8 · 2015-12-07 | 7.8 | 5.0% | 2015-12-07 |
| CVE-2025-60710In CISA KEVExploitedHost Process for Windows Tasks Elevation of Privilege VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 7.8 · 2025-11-11 | 7.8 | 4.6% | 2025-11-11 |
| CVE-2019-1385In CISA KEVExploitedAn elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit…Microsoft · Windows · CVSS 7.8 · 2019-11-12 | 7.8 | 3.6% | 2019-11-12 |
| CVE-2019-1315In CISA KEVExploitedAn elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vuln…Microsoft · Windows · CVSS 7.8 · 2019-10-10 | 7.8 | 3.5% | 2019-10-10 |
| CVE-2022-21919In CISA KEVExploitedWindows User Profile Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2022-01-11 | 7.0 | 2.6% | 2022-01-11 |
| CVE-2020-0638In CISA KEVExploitedAn elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain executi…Microsoft · Windows · CVSS 7.8 · 2020-01-14 | 7.8 | 2.5% | 2020-01-14 |
| CVE-2025-21391In CISA KEVExploitedWindows Storage Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.1 · 2025-02-11 | 7.1 | 2.3% | 2025-02-11 |
| CVE-2019-1129In CISA KEVExploitedAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Th…Microsoft · Windows · CVSS 7.8 · 2019-07-29 | 7.8 | 1.8% | 2019-07-29 |
| CVE-2019-1130In CISA KEVExploitedAn elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. Th…Microsoft · Windows Server · CVSS 7.8 · 2019-07-29 | 7.8 | 1.7% | 2019-07-29 |
| CVE-2009-0347CheckAutonomy Ultraseek - Open RedirectAutonomy · Ultraseek · 2009-01-29 | – | 11% | 2009-01-29 |
| CVE-2021-21300malicious repositories can execute remote code while cloninggit · git · CVSS 8 · 2021-03-09 | 8.0 | 89% | 2021-03-09 |
| CVE-2021-32610In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.Php · Archive Tar · 2021-07-27 | – | 73% | 2021-07-27 |
| CVE-2019-0572An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…Microsoft · Windows Server 2016 · 2019-01-08 | – | 25% | 2019-01-08 |
| CVE-2024-53691QTS, QuTS heroQNAP Systems Inc. · QTS · CVSS 8.7 · 2024-12-06 | 8.7 | 23% | 2024-12-06 |
| CVE-2019-0574An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege V…Microsoft · Windows Server 2016 · 2019-01-08 | – | 19% | 2019-01-08 |
| CVE-2019-1280A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploited this vu…Microsoft · Windows · 2019-09-11 | – | 19% | 2019-09-11 |
| CVE-1999-1593Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to cha…Microsoft · Windows 95 · 2009-01-15 | – | 18% | 2009-01-15 |
| CVE-2022-22582A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in Security Update 2022-003 Catalina, ma…Apple · macOS · 2023-02-27 | – | 18% | 2023-02-27 |
| CVE-2017-1002101In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileg…Kubernetes · Kubernetes · CVSS 8.8 · 2018-03-13 | 8.8 | 13% | 2018-03-13 |
| CVE-2009-0473Open redirect vulnerability in the web interface in the Rockwell Automation ControlLogix 1756-ENBT/A EtherNet/IP Bridge Module allows remote attackers to redirect users to arbitra…Rockwellautomation · Controllogix 1756-Enbt/a Ethernet/ Ip Bridge · 2009-02-06 | – | 13% | 2009-02-06 |
| CVE-1999-0981Internet Explorer 5.01 and earlier allows a remote attacker to create a reference to a client window and use a server-side redirect to access local files via that window, aka "Ser…Microsoft · Internet Explorer · 2000-01-04 | – | 13% | 2000-01-04 |
| CVE-2019-1002101kubectl cp path traversalKubernetes · Kubernetes · CVSS 6.4 · 2019-04-01 | 6.4 | 13% | 2019-04-01 |
| CVE-2024-26158Microsoft Install Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-04-09 | 7.8 | 12% | 2024-04-09 |
| CVE-2026-50656Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft · Microsoft Malware Protection Engine · CVSS 7.8 · 2026-06-16 | 7.8 | 11% | 2026-06-16 |
| CVE-2010-3847elf/dl-load.c in ld.so in the GNU C Library (aka glibc or libc6) through 2.11.2, and 2.12.x through 2.12.1, does not properly handle a value of $ORIGIN for the LD_AUDIT environmen…Gnu · Glibc · 2011-01-07 | – | 10% | 2011-01-07 |
| CVE-2010-3879FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent d…Libfuse Project · Libfuse · 2011-01-22 | – | 9.8% | 2011-01-22 |
| CVE-2008-4694Unspecified vulnerability in Opera before 9.60 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a redirect that specifies a c…Opera · Opera Browser · 2008-10-23 | – | 9.8% | 2008-10-23 |
| CVE-2021-21125Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML…Google · Chrome · 2021-02-09 | – | 8.7% | 2021-02-09 |
| CVE-2023-35633Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2023-12-12 | 7.8 | 8.7% | 2023-12-12 |
| CVE-2023-36399Windows Storage Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2022, 23H2 Edition (Server Core installation) · CVSS 7.1 · 2023-11-14 | 7.1 | 8.3% | 2023-11-14 |
| CVE-2021-21131Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.Google · Chrome · 2021-02-09 | – | 8.2% | 2021-02-09 |
| CVE-2018-12015In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file co…Perl · Perl · 2018-06-07 | – | 7.3% | 2018-06-07 |
| CVE-2019-11538In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1, an NFS problem could allow an authentica…Ivanti · Connect Secure · CVSS 7.7 · 2019-04-26 | 7.7 | 7.3% | 2019-04-26 |
| CVE-2023-36391Local Security Authority Subsystem Service Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 22H3 · CVSS 7.8 · 2023-12-12 | 7.8 | 7.2% | 2023-12-12 |
| CVE-2025-21204Windows Process Activation Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-04-08 | 7.8 | 7.1% | 2025-04-08 |
| CVE-2023-36394Windows Search Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7 · 2023-11-14 | 7.0 | 6.7% | 2023-11-14 |
| CVE-2014-9512rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path.Samba · Rsync · 2015-02-12 | – | 6.5% | 2015-02-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.