CWE-59: Link following
1,901 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 25 of them as exploited in the wild.
- Published CVEs
- 1,901
- Last 12 months
- 542
- Critical
- 63
- Known exploited
- 25
Critical 63High 858Medium 782Low 198Not scored 0
CVEs per yearBy the year they were published
- 201523
- 20168
- 201737
- 201850
- 2019111
- 2020110
- 2021102
- 202297
- 2023113
- 2024153
- 2025144
- 2026523
Known exploitedNewest addition to KEV first
- CVE-2026-81963
Windows Update Stack Elevation of Privilege Vulnerability
Microsoft · Windows 11 version 23H2
ExploitedHigh7.8 - CVE-2015-5287
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a…
Product not named
ExploitedHigh7.8 - CVE-2026-41091
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft · Microsoft Malware Protection Engine
ExploitedHigh7.8 - CVE-2024-57728
SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file…
Product not named
ExploitedHigh7.2 - CVE-2025-60710
Host Process for Windows Tasks Elevation of Privilege Vulnerability
Microsoft · Windows 11 Version 24H2
ExploitedHigh7.8 - CVE-2025-48384
Git allows arbitrary code execution through broken config quoting
git · git
ExploitedHigh8.1 - CVE-2025-21391
Windows Storage Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.1 - CVE-2023-36874
Windows Error Reporting Service Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8 - CVE-2020-36193
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to…
Product not named
ExploitedHigh7.5 - CVE-2022-30333
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a…
Product not named
ExploitedCritical9.8
Newest CVEs
- CVE-2026-123532
gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe
GitoxideLabs · gitoxide
High7.1 - CVE-2026-123496
Vikunja veans before 2.7.1 Symlink Following in veans init
go-vikunja · vikunja
Medium4.8 - CVE-2026-108262
DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885
ddev · ddev
Medium6.5 - CVE-2026-123842
In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives
JetBrains · IntelliJ IDEA
High7.1 - CVE-2026-123841
In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive
JetBrains · IntelliJ IDEA
High7.8 - CVE-2026-123836
In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup
JetBrains · Datalore
High8.8 - CVE-2026-123037
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
Red Hat · Migration Toolkit for Applications 8
Medium6.7 - CVE-2026-100395
LXC: lxc-copy host-context hostname update follows symlink
lxc · lxc
Medium6.8 - CVE-2026-62268
borg extract might modify out-of-tree files when extracting maliciously crafted archives
borgbackup · borg
Medium5.3 - CVE-2026-87008
Code Graph RAG structural tools follow out-of-root symlinks
vitali87 · code-graph-rag
High7.1