VYPR

CWE-59

Improper Link Resolution Before File Access ('Link Following')

BaseDraftLikelihood: Medium

Description

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Hierarchy (View 1000)

Related attack patterns (CAPEC)

CAPEC-132 · CAPEC-17 · CAPEC-35 · CAPEC-76

CVEs mapped to this weakness (1,658)

page 12 of 83
  • CVE-2024-7242HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target…

  • CVE-2024-7241HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target…

  • CVE-2024-7240HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    F-Secure Total Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of F-Secure Total. User interaction on the part of an administrator is required to exploit this vulnerability. The…

  • CVE-2024-7239HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    VIPRE Advanced Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7238HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    VIPRE Advanced Security SBAMSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged…

  • CVE-2024-7237HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7234HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7233HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on…

  • CVE-2024-7232HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on…

  • CVE-2024-7231HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7230HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7229HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Cleanup Premium. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-7227HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Free Antivirus. An attacker must first obtain the ability to execute low-privileged code on…

  • CVE-2024-9766HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Wacom Center WTabletServicePro Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Center. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-6260HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Malwarebytes Antimalware Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Malwarebytes Antimalware. An attacker must first obtain the ability to execute low-privileged code on…

  • CVE-2024-6233HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to…

  • CVE-2024-30377HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    G DATA Total Security Scan Server Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged…

  • CVE-2024-1868HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-1867HigNov 22, 2024
    risk 0.51cvss 7.8epss 0.00

    G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the…

  • CVE-2024-49051HigNov 12, 2024
    risk 0.51cvss 7.8epss 0.01

    Microsoft PC Manager Elevation of Privilege Vulnerability