Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-59 (在文件访问前对链接解析不恰当(链接跟随)) — Vulnerability Class 418

418 vulnerabilities classified as CWE-59 (在文件访问前对链接解析不恰当(链接跟随)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-2627 Softland FBackup Backup/Restore HID.dll link following — FBackup 7.8 High2026-02-17
CVE-2026-26225 Intego Personal Backup Task File Privilege Escalation — Personal Backup 7.8AIHighAI2026-02-12
CVE-2025-66277 QTS, QuTS hero — QTS 7.5AIHighAI2026-02-11
CVE-2026-21517 Windows App for Mac Installer Elevation of Privilege Vulnerability — Windows App for Mac 4.7 Medium2026-02-10
CVE-2025-62676 Fortinet FortiClientWindows 后置链接漏洞 — FortiClientWindows 6.4 High2026-02-10
CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx. — end-user-cx 5.5 Medium2026-02-09
CVE-2025-15313 Tanium addressed an arbitrary file deletion vulnerability in Tanium EUSS. — Tanium EUSS 5.5 Medium2026-02-09
CVE-2025-15310 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. — Patch Endpoint Tools 7.8 High2026-02-09
CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools. — End-User Notifications Endpoint Tools 5.1 Medium2026-02-09
CVE-2025-15319 Tanium addressed a local privilege escalation vulnerability in Patch Endpoint Tools. — Patch Endpoint Tools 7.8 High2026-02-09
CVE-2026-21419 Dell Display and Peripheral Manager 后置链接漏洞 — Display and Peripheral Manager (Windows) 6.6 Medium2026-02-09
CVE-2025-15324 Tanium addressed a local privilege escalation vulnerability in Engage. — Engage 6.6 Medium2026-02-05
CVE-2025-15328 Tanium addressed an improper link resolution before file access vulnerability in Enforce. — Enforce 5.0 Medium2026-02-05
CVE-2026-24884 Compressing Vulnerable to Arbitrary File Write via Symlink Extraction — compressing 8.4 High2026-02-04
CVE-2025-15543 Read-Only Root Access via USB Storage Device in TP-Link VX800v — VX800v v1.0 4.6AIMediumAI2026-01-29
CVE-2025-15541 Access to System Files via SFTP on TP-Link VX800v — VX800v v1.0 5.7AIMediumAI2026-01-29
CVE-2026-23563 Privilege escalation in TeamViewer DEX via DeleteFileByPath instruction — DEX 5.7 Medium2026-01-29
CVE-2026-23893 openCryptoki has improper link resolution before file access (link following) — opencryptoki 6.8 Medium2026-01-22
CVE-2026-24047 @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass — backstage 6.3 Medium2026-01-21
CVE-2025-13154 Lenovo Vantage 安全漏洞 — Vantage 5.5 Medium2026-01-14
CVE-2026-20941 Host Process for Windows Tasks Elevation of Privilege Vulnerability — Windows 11 Version 24H2 7.8 High2026-01-13
CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation — virtualenv 4.5 Medium2026-01-10
CVE-2026-22701 filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock — filelock 5.3 Medium2026-01-10
CVE-2025-12838 MSP360 Free Backup Link Following Local Privilege Escalation Vulnerability — Free Backup 7.3AIHighAI2025-12-23
CVE-2023-53973 Zillya Total Security 3.0.2367.0 Local Privilege Escalation via Quarantine Module — Zillya Total Security 8.4 High2025-12-22
CVE-2025-7073 Local Privilege Escalation via Arbitrary File Operation in Bitdefender Total Security — Total Security 7.8AIHighAI2025-12-10
CVE-2025-46636 Dell Encryption 后置链接漏洞 — Dell Encryption 6.6 Medium2025-12-09
CVE-2025-46637 Dell Encryption 后置链接漏洞 — Dell Encryption 7.3 High2025-12-09
CVE-2025-60710 Host Process for Windows Tasks Elevation of Privilege Vulnerability — Windows 11 Version 24H2 7.8 High2025-11-11
CVE-2025-59510 Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability — Windows 10 Version 1607 5.5 Medium2025-11-11

Vulnerabilities classified as CWE-59 (在文件访问前对链接解析不恰当(链接跟随)) represent 418 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.