CWE-1386
18 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 18Published CVEs18 of them scored
- 5Last 12 monthspublished in the last year
- 1Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-64394
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365,…
Veeam · Backup for Microsoft 365
Medium4.3 - CVE-2026-56857
Root.Mkdir(All) can follow junctions out of the root on Windows in os
Go standard library · os
Critical9.8 - CVE-2025-64391
This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an…
Veeam · Agent for Windows
Medium4.1 - CVE-2026-41116
Dell Inventory Collector Client, versions prior to 13.8.0, contain an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low…
Dell · Inventory Collector Client
Medium6.3 - CVE-2025-58074
Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store
Gen Digital · Norton Secure VPN
High8.8 - CVE-2024-36340
A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file…
AMD · AMD μProf
Medium6.6 - CVE-2024-7400
Local privilege escalation in ESET products for Windows
ESET, spol. s r.o. · ESET NOD32 Antivirus
High8.5 - CVE-2023-32454
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could…
Dell · DUP Framework
Medium6.3 - CVE-2023-32474
Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could…
Dell · Dell Display Manager
Medium6.6 - CVE-2023-5834
Vagrant’s Windows Installer Allowed Directory Junction Write
HashiCorp · Vagrant
Low3.8