CWE-64 · File and Path Handling
Windows Shortcut Following (.LNK)
9CVEs
SortMost likely exploited
9 CVEs with CWE-64 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-52521Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privile…Trend Micro, Inc. · Trend Micro Security (Consumer) · CVSS 7.8 · 2025-07-10 | 7.8 | 0.4% | 2025-07-10 |
| CVE-2021-1492Duo Authentication Proxy Installer Denial of Service VulnerabilityCisco · Duo Authentication Proxy · CVSS 6.6 · 2021-03-25 | 6.6 | 0.3% | 2021-03-25 |
| CVE-2025-53503Trend Micro Cleaner One Pro is vulnerable to a Privilege Escalation vulnerability that could allow a local attacker to unintentionally delete privileged Trend Micro files includin…Trend Micro, Inc. · Trend Micro Cleaner One Pro · CVSS 7.8 · 2025-07-10 | 7.8 | 0.3% | 2025-07-10 |
| CVE-2021-41562Deletion of arbitrary files vulnerability in Snow Agent for WindowsSnow · Snow Agent for Windows · CVSS 6.1 · 2021-11-03 | 6.1 | 0.3% | 2021-11-03 |
| CVE-2025-48443Trend Micro Password Manager (Consumer) version 5.0.0.1266 and below is vulnerable to a Link Following Local Privilege Escalation Vulnerability that could allow a local attacker t…Trend Micro, Inc. · Trend Micro Password Manager · CVSS 6.7 · 2025-06-17 | 6.7 | 0.2% | 2025-06-17 |
| CVE-2025-7376Information Tampering Vulnerability in Multiple Processes of GENESIS64, ICONICS Suite, MobileHMI, Hyper Historian, AnalytiX, IoTWorX, MC Works64, and GENESISMitsubishi Electric Corporation · GENESIS64 · CVSS 5.9 · 2025-08-06 | 5.9 | 0.2% | 2025-08-06 |
| CVE-2025-49385Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privile…Trend Micro, Inc. · Trend Micro Internet Security (Consumer) · CVSS 7.8 · 2025-06-17 | 7.8 | 0.2% | 2025-06-17 |
| CVE-2025-49384Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that could allow a local attacker to unintentionally delete privile…Trend Micro, Inc. · Trend Micro Internet Security (Consumer) · CVSS 7.8 · 2025-06-17 | 7.8 | 0.2% | 2025-06-17 |
| CVE-2025-52837Trend Micro Password Manager (Consumer) version 5.8.0.1327 and below is vulnerable to a Link Following Privilege Escalation Vulnerability that could allow an attacker the opportun…Trend Micro, Inc. · Trend Micro Password Manager · CVSS 7.8 · 2025-07-10 | 7.8 | 0.2% | 2025-07-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.