CWE-59 在文件访问前对链接解析不恰当(链接跟随) 类弱点 641 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-59 属于文件访问类漏洞，指程序在访问文件前未正确验证链接解析结果。攻击者常通过创建指向敏感资源的符号链接或快捷方式，诱导程序读取非预期文件，从而引发信息泄露或权限提升。开发者应避免直接使用用户输入的文件名，需在访问前校验最终解析路径，确保其位于预期的安全目录内，防止链接劫持风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-33075 | Microsoft Windows Installer 后置链接漏洞 — Windows 10 Version 1507 | 7.8 | High | 2025-06-10 |
| CVE-2025-32721 | Microsoft Windows 后置链接漏洞 — Windows 10 Version 1507 | 7.3 | High | 2025-06-10 |
| CVE-2025-5474 | 2BrightSparks SyncBackFree 后置链接漏洞 — SyncBackFree | 7.3AI | High AI | 2025-06-06 |
| CVE-2024-11857 | Realtek Bluetooth HCI Adaptor 后置链接漏洞 — Bluetooth HCI Adaptor | 7.8 | High | 2025-06-02 |
| CVE-2025-47181 | Microsoft Edge 后置链接漏洞 — Microsoft Edge (Chromium-based) Updater | 8.8 | High | 2025-05-22 |
| CVE-2025-2102 | HYPR Passwordless 安全漏洞 — Passwordless | 7.8AI | High AI | 2025-05-21 |
| CVE-2025-3908 | OpenVPN 安全漏洞 — OpenVPN 3 Linux | 5.5AI | Medium AI | 2025-05-19 |
| CVE-2025-4211 | Qt 安全漏洞 — Qt | 7.3 | High | 2025-05-16 |
| CVE-2025-29837 | Microsoft Windows Installer 后置链接漏洞 — Windows 10 Version 1507 | 5.5 | Medium | 2025-05-13 |
| CVE-2025-29975 | Microsoft PC Manager 后置链接漏洞 — Microsoft PC Manager | 7.8 | High | 2025-05-13 |
| CVE-2025-22247 | VMware Tools 安全漏洞 — VMware Tools | 6.1 | Medium | 2025-05-12 |
| CVE-2024-9524 | Avira Prime 安全漏洞 — Prime | 7.8 | High | 2025-05-09 |
| CVE-2024-13962 | Gen Digital Avast Cleanup Premium 安全漏洞 — CleanUp Premium | 7.8 | High | 2025-05-09 |
| CVE-2024-13961 | Gen Digital Avast Cleanup Premium 安全漏洞 — CleanUp Premium | 7.8 | High | 2025-05-09 |
| CVE-2024-13960 | Gen Digital AVG TuneUp 安全漏洞 — TuneUp | 7.8 | High | 2025-05-09 |
| CVE-2024-13959 | Gen Digital AVG TuneUp 安全漏洞 — TuneUp | 7.8 | High | 2025-05-09 |
| CVE-2024-13759 | Avira Prime 安全漏洞 — Prime | 7.8 | High | 2025-05-09 |
| CVE-2025-1697 | HP Touchpoint Analytics Service 安全漏洞 — HP Touchpoint Analytics Service | 7.8 | - | 2025-04-18 |
| CVE-2025-32817 | SonicWALL Connect Tunnel 安全漏洞 — Connect Tunnel | 8.4AI | High AI | 2025-04-16 |
| CVE-2025-29983 | Dell Trusted Device 后置链接漏洞 — Dell Trusted Device Client | 6.7 | Medium | 2025-04-15 |
| CVE-2025-23010 | SonicWALL NetExtender Windows client 安全漏洞 — NetExtender | 7.5AI | High AI | 2025-04-10 |
| CVE-2025-27727 | Microsoft Windows Installer 后置链接漏洞 — Windows 10 Version 1507 | 7.8 | High | 2025-04-08 |
| CVE-2025-21204 | Microsoft Windows Update Stack 后置链接漏洞 — Windows 10 Version 1507 | 7.8 | High | 2025-04-08 |
| CVE-2025-30371 | Metabase 后置链接漏洞 — metabase | 6.1 | - | 2025-03-28 |
| CVE-2024-12905 | tar-fs 安全漏洞 | 7.5 | High | 2025-03-27 |
| CVE-2025-29795 | Microsoft Edge 后置链接漏洞 — Microsoft Edge Update Setup | 7.8 | High | 2025-03-23 |
| CVE-2024-10986 | GPT Academic 输入验证错误漏洞 — binary-husky/gpt_academic | 7.5 | - | 2025-03-20 |
| CVE-2024-12390 | GPT Academic 安全漏洞 — binary-husky/gpt_academic | 8.8 | - | 2025-03-20 |
| CVE-2024-12216 | Gluon CV Toolkit 输入验证错误漏洞 — dmlc/gluon-cv | 6.5 | - | 2025-03-20 |
| CVE-2025-1683 | 1E Client 安全漏洞 — 1E Client | 7.8 | High | 2025-03-12 |
CWE-59（在文件访问前对链接解析不恰当(链接跟随)） 是常见的弱点类别，本平台收录该类弱点关联的 641 条 CVE 漏洞。