3 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

13 May 2025 — Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft PC Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the MSPCManagerService. By creating a symbolic link, an attacker can abuse the ser... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-29975 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

11 Feb 2025 — Microsoft PC Manager Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21322 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

12 Nov 2024 — Microsoft PC Manager Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49051 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •