CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Windows Update Stack Privilege Escalation Vulnerability via Link Following (CVE-2026-81963) Technical Advisory
[Affected Scope] Microsoft Windows operating systems utilizing the Windows Update Stack
[Impact] A local authorized attacker can exploit improper link resolution to elevate privileges to SYSTEM, leading to complete system compromise
[Mitigation] Apply the official Microsoft security updates immediately, or restrict local symbolic link creation privileges as a temporary mitigation
Microsoft Defender Local Privilege Escalation Vulnerability (CVE-2026-41091) Technical Advisory
[Affected Scope] Windows operating system environments with Microsoft Defender enabled
[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host
[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions
Microsoft Windows Host Process for Windows Tasks (taskhostw.exe) Local Privilege Escalation Vulnerability (CVE-2025-60710) Analysis and Mitigation Guide
[Affected Scope] All Windows operating systems utilizing the Host Process for Windows Tasks (taskhostw.exe).
[Impact] An authorized local attacker can exploit improper link resolution to elevate privileges to SYSTEM, leading to complete system compromise.
[Mitigation] Apply the official Microsoft security patches immediately, and implement temporary workarounds and monitoring scripts prior to patching.
Git Submodule Path CRLF Parsing Flaw and Symlink-Based Remote Code Execution (CVE-2025-48384)
[Affected Scope] All Git versions prior to v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1
[Impact] A remote attacker can craft a malicious repository with specially designed submodule paths and symlinks, leading to arbitrary post-checkout hook execution and full system compromise upon cloning.
[Mitigation] Immediately upgrade Git clients to the patched versions (e.g., v2.50.1) and avoid recursively cloning untrusted repositories.
Windows Storage Elevation of Privilege Vulnerability (CVE-2025-21391) Security Advisory
[Affected Scope] Windows 10, Windows 11, and Windows Server operating systems utilizing Windows Storage components
[Impact] Local attackers with low privileges can exploit symbolic link creation to overwrite critical system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Apply the Microsoft February 2025 security updates immediately and restrict local symbolic link creation privileges on unpatched systems
SimpleHelp Remote Support Software Arbitrary File Upload and Remote Code Execution Vulnerability (CVE-2024-57728) Security Advisory
[Affected Scope] SimpleHelp remote support software v5.5.7 and prior versions.
[Impact] Authenticated administrative users can upload a crafted ZIP archive to write arbitrary files anywhere on the file system (Zip Slip), leading to Remote Code Execution (RCE) under the context of the SimpleHelp server user.
[Mitigation] Immediately upgrade SimpleHelp to the latest secure version (v5.5.8 or later) and restrict access to the administrative interface.
Windows Error Reporting (WER) Local Privilege Escalation Vulnerability (CVE-2023-36874) Analysis and Mitigation Guide
[Affected Scope] Most major versions of Windows operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A local authenticated attacker with low privileges can manipulate file system links to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the latest cumulative security updates provided by Microsoft, or temporarily disable the WER service and restrict file link creation privileges
RARLAB UnRAR Directory Traversal Vulnerability (CVE-2022-30333) Technical Analysis and Mitigation Guide
[Affected Scope] RARLAB UnRAR utility versions prior to 6.12 on Linux and UNIX platforms.
[Impact] Attackers can exploit this vulnerability to write arbitrary files outside the extraction directory, potentially leading to Remote Code Execution (RCE).
[Mitigation] Immediately upgrade UnRAR to version 6.12 or later, and apply security patches to integrated applications like Zimbra.
Windows Print Spooler Elevation of Privilege Vulnerability (CVE-2022-21999) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, 11 and Windows Server 2008, 2012, 2016, 2019, 2022 with active Print Spooler service
[Impact] Local attackers can exploit directory traversal and symbolic link creation to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Apply the official Microsoft security updates immediately, or disable the Print Spooler service on non-printing servers and Domain Controllers
Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2022-21919) Deep Dive & Mitigation Guide
[Affected Scope] Most Windows client and server operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A locally authenticated attacker can exploit a symbolic link vulnerability to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local logon privileges in multi-user environments
Microsoft Windows Installer Elevation of Privilege Vulnerability (CVE-2021-41379) Technical Analysis and Mitigation Guide
[Affected Scope] Microsoft Windows operating systems, including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022
[Impact] A local authenticated attacker can exploit improper link resolution in the Windows Installer service to delete or manipulate arbitrary files with SYSTEM privileges, potentially leading to full local privilege escalation
[Mitigation] Apply the official cumulative security updates provided by Microsoft immediately, or restrict Windows Installer execution for non-administrative users as a temporary workaround
PEAR Archive_Tar Directory Traversal and Arbitrary File Write via Symlink Verification Bypass (CVE-2020-36193)
[Affected Scope] PHP applications and frameworks (including Drupal) utilizing PEAR Archive_Tar versions 1.4.11 and prior
[Impact] Remote attackers can exploit inadequate symbolic link validation to perform directory traversal, writing arbitrary files to the system and potentially achieving Remote Code Execution (RCE)
[Mitigation] Immediately upgrade the PEAR Archive_Tar package to version 1.4.12 or higher, and restrict archive file uploads and extraction paths
Windows Background Intelligent Transfer Service (BITS) Symbolic Link Local Privilege Escalation Vulnerability (CVE-2020-0787) Technical Advisory
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 utilizing the BITS service
[Impact] A local authenticated attacker can exploit improper symbolic link handling to overwrite arbitrary system files and execute code with NT AUTHORITY\SYSTEM privileges
[Mitigation] Apply the official Microsoft security updates immediately, or temporarily disable the BITS service and restrict symbolic link creation privileges for non-admin users
Windows Installer Privilege Escalation via Symbolic Link Manipulation (CVE-2020-0683)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 containing the Windows Installer service
[Impact] Local attackers can exploit improper symbolic link handling in MSI packages to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Apply the official Microsoft security updates immediately and restrict non-admin MSI installation privileges as a temporary workaround
Windows Update Notification Manager Elevation of Privilege Vulnerability (CVE-2020-0638) Analysis & Mitigation Guide
[Affected Scope] Update Notification Manager service running on Windows 10 and Windows Server operating systems
[Impact] A local attacker can exploit symbolic link creation to overwrite system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable associated scheduled tasks as a temporary workaround
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (CVE-2019-1385) Analysis and Mitigation Guide
[Affected Scope] Windows AppX Deployment Extensions component running on Windows 10 and Windows Server environments.
[Impact] An authenticated local attacker can execute a specially crafted application to access system files, leading to full SYSTEM privilege escalation.
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict symbolic link creation privileges for non-administrative users.
Windows Error Reporting (WER) Hard Link Elevation of Privilege Vulnerability (CVE-2019-1315)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 with Windows Error Reporting (WER) enabled
[Impact] A local attacker can exploit hard links to overwrite or manipulate arbitrary system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Immediately apply the official Microsoft security patches and restrict local write permissions on temporary directories prior to patching
Windows AppX Deployment Server (AppXSvc) Elevation of Privilege Vulnerability via Junction Handling (CVE-2019-1253)
[Affected Scope] Windows AppX Deployment Service (AppXSvc) running on affected Windows 10 and Windows Server environments
[Impact] Local attackers can exploit improper junction link handling to elevate privileges to NT AUTHORITY\SYSTEM, leading to complete system compromise
[Mitigation] Apply the official Microsoft cumulative security updates immediately and restrict symbolic link creation privileges
Windows AppX Deployment Service (AppXSVC) Hard Link Improper Handling Local Elevation of Privilege Vulnerability (CVE-2019-1130)
[Affected Scope] Microsoft Windows operating systems, including Windows 10 and Windows Server 2016/2019, utilizing the AppX Deployment Service (AppXSVC)
[Impact] A local attacker can execute arbitrary code with SYSTEM privileges by running a specially crafted application, leading to complete system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft to correct the file system link handling logic within AppXSVC
Windows AppX Deployment Service (AppXSVC) Elevation of Privilege Vulnerability via Hard Link Mismanagement (CVE-2019-1129)
[Affected Scope] Microsoft Windows operating systems utilizing the AppX Deployment Service (AppXSVC), including Windows 10 and Windows Server 2016/2019
[Impact] An attacker with local user access can exploit the vulnerability to run arbitrary code with SYSTEM privileges, leading to complete system compromise
[Mitigation] Apply the official cumulative security updates provided by Microsoft and restrict local user privileges