CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Defender Local Privilege Escalation Vulnerability (CVE-2026-41091) Technical Advisory
[Affected Scope] Windows operating system environments with Microsoft Defender enabled
[Impact] A local authorized attacker can exploit symbolic link resolution to elevate privileges to NT AUTHORITY\SYSTEM, gaining full control over the host
[Mitigation] Immediately apply the official Microsoft security updates and ensure the Defender engine and definitions are updated to the latest versions
Gogs Git Service PutContents API Symbolic Link Handling Remote Code Execution Vulnerability Analysis and Mitigation (CVE-2025-8110)
[Affected Scope] All active deployments of Gogs Git service utilizing the vulnerable PutContents API.
[Impact] An authenticated attacker with low privileges can exploit improper symbolic link validation to overwrite arbitrary system files, leading to Remote Code Execution (RCE).
[Mitigation] Immediately upgrade Gogs to the latest patched version and restrict repository creation and write permissions for untrusted users.
Windows User Profile Service Elevation of Privilege Vulnerability (CVE-2022-21919) Deep Dive & Mitigation Guide
[Affected Scope] Most Windows client and server operating systems, including Windows 10, 11, and Windows Server 2008 through 2022
[Impact] A locally authenticated attacker can exploit a symbolic link vulnerability to execute arbitrary code with SYSTEM privileges, leading to full system compromise
[Mitigation] Immediately apply the official Microsoft cumulative security updates and restrict local logon privileges in multi-user environments
PEAR Archive_Tar Directory Traversal and Arbitrary File Write via Symlink Verification Bypass (CVE-2020-36193)
[Affected Scope] PHP applications and frameworks (including Drupal) utilizing PEAR Archive_Tar versions 1.4.11 and prior
[Impact] Remote attackers can exploit inadequate symbolic link validation to perform directory traversal, writing arbitrary files to the system and potentially achieving Remote Code Execution (RCE)
[Mitigation] Immediately upgrade the PEAR Archive_Tar package to version 1.4.12 or higher, and restrict archive file uploads and extraction paths
Red Hat / Oracle Linux ABRT Local Privilege Escalation Vulnerability (CVE-2015-5287) Analysis and Mitigation Guide
[Affected Scope] Automatic Bug Reporting Tool (ABRT) versions prior to 2.7.1 installed on Red Hat Enterprise Linux and Oracle Linux systems
[Impact] Local attackers with limited privileges can exploit a symlink attack to gain root privileges and achieve full system compromise
[Mitigation] Upgrade ABRT packages to version 2.7.1 or higher, or temporarily disable the abrt-ccpp service