CWE-59: Link following
1,885 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 25 of them as exploited in the wild.
- Published CVEs
- 1,885
- Last 12 months
- 534
- Critical
- 63
- Known exploited
- 25
Critical 63High 851Medium 771Low 197Not scored 3
CVEs per yearBy the year they were published
- 201839
- 201825
- 201996
- 201945
- 2019180
- 202392
- 2023103
- 2025142
- 2025123
- 2026479
- 2026150
- 2026109
Known exploitedNewest addition to KEV first
- CVE-2026-81963
Windows Update Stack Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 23H2
ExploitedHigh7.8 - CVE-2015-5287
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a…
Product not named
ExploitedHigh7.8 - CVE-2026-41091
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft · Microsoft Malware Protection Engine
ExploitedHigh7.8 - CVE-2024-57728
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file…
Product not named
ExploitedHigh7.2 - CVE-2025-60710
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Microsoft · Windows 11 Version 24H2
ExploitedHigh7.8 - CVE-2025-48384
Git allows arbitrary code execution through broken config quoting
git · git
ExploitedHigh8.1 - CVE-2025-21391
Windows Storage Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.1 - CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8 - CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to…
Product not named
ExploitedHigh7.5 - CVE-2022-30333
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a…
Product not named
ExploitedCritical9.8
Newest CVEs
- CVE-2026-64672
Terragrunt catalog predictable temp symlink clobber
gruntwork-io · terragrunt
Medium4.4 - CVE-2026-121224
Security issue in Desktop in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially…
Google · Chrome
Not scored - CVE-2026-88968
Claude Code: TOCTOU Race in Edit Tool Allows File Writes Outside the Workspace
anthropics · claude-code
High7.7 - CVE-2026-63395
isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)
isomorphic-git · isomorphic-git
High8.8 - CVE-2026-103916
Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory
Docker · Docker Sandboxes
High8.4 - CVE-2026-119673
mongofiles may write outside the working directory through a symlink
MongoDB · Database Tools
Low1.0 - CVE-2026-121550
nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling
jarun · nnn
Low1.0 - CVE-2026-121546
ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following
Novik · ruTorrent
Medium6.0 - CVE-2026-105476
Improper link resolution before file access in cPanel allows remote authenticated users to write arbitrary root-owned files and escalate privileges.
WebPros · cPanel
High8.8 - CVE-2026-120066
psqlODBC log files are created with default permissions at a predictable path and follow symbolic links
PostgreSQL · psqlODBC
Medium5.3