Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-1386

18 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
18
Last 12 months
5
Critical
1
Known exploited
0

Critical 1High 3Medium 13Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20239
  2. 20243
  3. 20251
  4. 20265

Newest CVEs

  • CVE-2025-64394

    A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365,…

    Veeam · Backup for Microsoft 365

    Medium4.3
  • CVE-2026-56857

    Root.Mkdir(All) can follow junctions out of the root on Windows in os

    Go standard library · os

    Critical9.8
  • CVE-2025-64391

    This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an…

    Veeam · Agent for Windows

    Medium4.1
  • CVE-2026-41116

    Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low…

    Dell · Inventory Collector Client

    Medium6.3
  • CVE-2025-58074

    Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

    Gen Digital · Norton Secure VPN

    High8.8
  • CVE-2024-36340

    A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file…

    AMD · AMD μProf

    Medium6.6
  • CVE-2024-7400

    Local privilege escalation in ESET products for Windows

    ESET, spol. s r.o. · ESET NOD32 Antivirus

    High8.5
  • CVE-2023-32454

    DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could…

    Dell · DUP Framework

    Medium6.3
  • CVE-2023-32474

    Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could…

    Dell · Dell Display Manager

    Medium6.6
  • CVE-2023-5834

    Vagrant’s Windows Installer Allowed Directory Junction Write

    HashiCorp · Vagrant

    Low3.8

Vendors it comes up for most

  1. Dell9
  2. Veeam2
  3. AMD1
  4. ESET, spol. s r.o.1
  5. Gen Digital1
  6. Go standard library1
  7. HashiCorp1
  8. NVIDIA1
  9. SAP_SE1