CWE-59— Improper Link Resolution Before File Access (Link Following)
The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.— MITRE CWE catalog
1,914 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-59page 18 of 39
- CVE-2026-49135HIGHCVSS 7.1EG 7.12026-06-01
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by exploiting predictable file paths in the release notarization…
- CVE-2026-0827HIGHCVSS 7.1EG 7.12026-04-15
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticate…
- CVE-2026-34604HIGHCVSS 7.1EG 7.12026-04-01
Tina is a headless content management system. Prior to version 2.2.2, @tinacms/graphql uses string-based path containment checks in FilesystemBridge. That blocks plain ../ traversal, but it does not resolve symlink or junction targets. If …
- CVE-2026-34603HIGHCVSS 7.1EG 7.12026-04-01
Tina is a headless content management system. Prior to version 2.2.2, @tinacms/cli recently added lexical path-traversal checks to the dev media routes, but the implementation still validates only the path string and does not resolve symli…
- CVE-2025-66680HIGHCVSS 7.1EG 7.12026-03-03
An issue in the WiseDelfile64.sys component of WiseCleaner Wise Force Deleter 7.3.2 and earlier allows attackers to delete arbitrary files via a crafted request.
- CVE-2026-27967HIGHCVSS 7.1EG 7.12026-02-26
Zed, a code editor, has a symlink escape vulnerability in versions prior to 0.225.9 in Agent file tools (`read_file`, `edit_file`). It allows reading and writing files **outside the project directory** when a project contains symbolic link…
- CVE-2025-62676HIGHCVSS 7.1EG 7.12026-02-10
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may all…
- CVE-2025-15313HIGHCVSS 7.1EG 7.12026-02-10
Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS.
- CVE-2026-23563HIGHCVSS 7.1EG 7.12026-01-29
Improper Link Resolution Before File Access (invoked by 1E‑Explorer‑TachyonCore‑DeleteFileByPath instruction) in TeamViewer DEX - 1E Client before version 26.1 on Windows allows a low‑privileged local attacker to delete protected s…
- CVE-2026-24046HIGHCVSS 7.1EG 7.12026-01-21
Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based path traversal attacks. An attacker with access to create and execute Scaffolder t…
- CVE-2025-3771HIGHCVSS 7.1EG 7.12025-06-26
A path or symbolic link manipulation vulnerability in SIR 1.0.3 and prior versions allows an authenticated non-admin local user to overwrite system files with SIR backup files, which can potentially cause a system crash. This was achieved …
- CVE-2024-12216HIGHCVSS 7.1EG 7.12025-03-20
A vulnerability in the `ImageClassificationDataset.from_csv()` API of the `dmlc/gluon-cv` repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts `tar.gz` files from URLs without proper sanitization…
- CVE-2025-25008HIGHCVSS 7.1EG 7.12025-03-11
Improper link resolution before file access ('link following') in Microsoft Windows allows an authorized attacker to elevate privileges locally.
- CVE-2025-21419HIGHCVSS 7.1EG 7.12025-02-11
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
- CVE-2024-52535HIGHCVSS 7.1EG 7.12024-12-25
Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link (symlink) attack vulnerability in the software remediation component. A low-privileged authe…
- CVE-2024-44258HIGHCVSS 7.1EG 7.12024-10-28
This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of pr…
- CVE-2024-38097HIGHCVSS 7.1EG 7.12024-10-08
Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2024-38188HIGHCVSS 7.1EG 7.12024-09-10
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
- CVE-2024-35254HIGHCVSS 7.1EG 7.12024-06-11
Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2024-23459HIGHCVSS 7.1EG 7.12024-05-02
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.
- CVE-2023-36399HIGHCVSS 7.1EG 7.12023-11-14
Windows Storage Elevation of Privilege Vulnerability
- CVE-2023-36046HIGHCVSS 7.1EG 7.12023-11-14
Windows Authentication Denial of Service Vulnerability
- CVE-2020-28407HIGHCVSS 7.1EG 7.12023-11-03
In swtpm before 0.4.2 and 0.5.x before 0.5.1, a local attacker may be able to overwrite arbitrary files via a symlink attack against a temporary file such as TMP2-00.permall.
- CVE-2023-36876HIGHCVSS 7.1EG 7.12023-08-08
Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability
- CVE-2023-35347HIGHCVSS 7.1EG 7.12023-07-11
Microsoft Install Service Elevation of Privilege Vulnerability
- CVE-2023-27469HIGHCVSS 7.1EG 7.12023-06-30
Malwarebytes Anti-Exploit 4.4.0.220 is vulnerable to arbitrary file deletion and denial of service via an ALPC message in which FullFileNamePath lacks a '\0' character.
- CVE-2023-24904HIGHCVSS 7.1EG 7.12023-05-09
Windows Installer Elevation of Privilege Vulnerability
- CVE-2022-34292HIGHCVSS 7.1EG 7.12023-04-27
Docker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder parameter for DockerDesktop.vhdx, a similar issue to CVE-2022-31…
- CVE-2022-31647HIGHCVSS 7.1EG 7.12023-04-27
Docker Desktop before 4.6.0 on Windows allows attackers to delete any file through the hyperv/destroy dockerBackendV2 API via a symlink in the DataFolder parameter, a different vulnerability than CVE-2022-26659.
- CVE-2023-28222HIGHCVSS 7.1EG 7.12023-04-11
Windows Kernel Elevation of Privilege Vulnerability
- CVE-2023-21760HIGHCVSS 7.1EG 7.12023-01-10
Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2022-32450HIGHCVSS 7.1EG 7.12022-07-18
AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room data there.
- CVE-2022-30687HIGHCVSS 7.1EG 7.12022-05-27
Trend Micro Maximum Security 2022 is vulnerable to a link following vulnerability that could allow a low privileged local user to manipulate the product's secure erase feature to delete arbitrary files.
- CVE-2022-27816HIGHCVSS 7.1EG 7.12022-03-30
SWHKD 1.1.5 unsafely uses the /tmp/swhks.pid pathname. There can be data loss or a denial of service.
- CVE-2022-26659HIGHCVSS 7.1EG 7.12022-03-25
Docker Desktop installer on Windows in versions before 4.6.0 allows an attacker to overwrite any administrator writable files by creating a symlink in place of where the installer writes its log file. Starting from version 4.6.0, the Docke…
- CVE-2022-21997HIGHCVSS 7.1EG 7.12022-02-09
Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2021-45442HIGHCVSS 7.1EG 7.12022-01-10
A link following denial-of-service vulnerability in Trend Micro Worry-Free Business Security (on prem only) could allow a local attacker to overwrite arbitrary files in the context of SYSTEM. This is similar to, but not the same as CVE-202…
- CVE-2021-44024HIGHCVSS 7.1EG 7.12022-01-10
A link following denial-of-service vulnerability in Trend Micro Apex One (on-prem and SaaS) and Trend Micro Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to overwrite arbitrary files in the context of SY…
- CVE-2021-44023HIGHCVSS 7.1EG 7.12021-12-16
A link following denial-of-service (DoS) vulnerability in the Trend Micro Security (Consumer) 2021 familiy of products could allow an attacker to abuse the PC Health Checkup feature of the product to create symlinks that would allow modifi…
- CVE-2021-41057HIGHCVSS 7.1EG 7.12021-11-14
In WIBU CodeMeter Runtime before 7.30a, creating a crafted CmDongles symbolic link will overwrite the linked file without checking permissions.
- CVE-2021-36286HIGHCVSS 7.1EG 7.12021-09-28
Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited by using the Windows feature of NTFS called Symbolic links. Symbolic links can b…
- CVE-2021-1092HIGHCVSS 7.1EG 7.12021-07-22
NVIDIA GPU Display Driver for Windows contains a vulnerability in the NVIDIA Control Panel application where it is susceptible to a Windows file system symbolic link attack where an unprivileged attacker can cause the applications to overw…
- CVE-2021-1091HIGHCVSS 7.1EG 7.12021-07-22
NVIDIA GPU Display driver for Windows contains a vulnerability where an unprivileged user can create a file hard link that causes the driver to overwrite a file that requires elevated privilege to modify, which could lead to data loss or d…
- CVE-2020-27833HIGHCVSS 7.1EG 7.12021-05-14
A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image (.tar file) which contains symbolic links. The vulnerability is limited to …
- CVE-2020-15075HIGHCVSS 7.1EG 7.12021-03-30
OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp.
- CVE-2020-28641HIGHCVSS 7.1EG 7.12020-12-22
In Malwarebytes Free 4.1.0.56, a symbolic link may be used delete an arbitrary file on the system by exploiting the local quarantine system.
- CVE-2020-16853HIGHCVSS 7.1EG 7.12020-09-11
<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevat…
- CVE-2020-16851HIGHCVSS 7.1EG 7.12020-09-11
<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevat…
- CVE-2020-14990HIGHCVSS 7.1EG 7.12020-06-22
IOBit Advanced SystemCare Free 13.5.0.263 allows local users to gain privileges for file deletion by manipulating the Clean & Optimize feature with an NTFS junction and an Object Manager symbolic link.
- CVE-2020-8099HIGHCVSS 7.1EG 7.12020-04-21
A vulnerability in the improper handling of junctions in Bitdefender Antivirus Free can allow an unprivileged user to substitute a quarantined file, and restore it to a privileged location. This issue affects: Bitdefender Antivirus Free ve…
Map vulnerabilities like CWE-59 to your infrastructure
EchelonGraph correlates every CVE — across CWE-59 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →