CWE-363
16 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 16Published CVEs16 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-112938
filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses
tox-dev · filelock
Medium5.8 - CVE-2026-112940
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
tox-dev · filelock
High7.1 - CVE-2026-112914
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
tox-dev · filelock
Medium5.3 - CVE-2026-91203
Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition
Red Hat · Red Hat Enterprise Linux 10
Medium6.0 - CVE-2026-91205
Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race
Red Hat · Red Hat Enterprise Linux 10
Medium6.0 - CVE-2026-71125
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily…
Oracle Corporation · Oracle VM VirtualBox
Medium6.1 - CVE-2025-13492
HP Image Assistant - Potential Escalation of Privilege
HP Inc · HP Image Assistant
Medium5.4 - CVE-2025-52881
runc: LSM labels can be bypassed with malicious config using dummy procfs files
opencontainers · runc
High7.3 - CVE-2025-52565
container escape due to /dev/console mount and related races
opencontainers · runc
High8.4 - CVE-2025-31133
runc container escape via "masked path" abuse due to mount race conditions
opencontainers · runc
High7.3