WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-59✕
Overview 33 matches · 1 in Waratek scope · 1 protected · 25 CISA KEV · 19 public PoC · 3 EPSS ≥ 0.5
33matches 1in Waratek scope3.0% 1protected3.0% 25CISA KEV75.8% 19public PoC57.6% 3EPSS ≥ 0.59.1%
Protected by Waratek 1 3.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 32 97.0% Withdrawn CVE 0 0.0%
Critical 2 6.1% High 30 90.9% Medium 1 3.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 3.0% partly blocked 0 0.0% not blocked 32 97.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 33 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 8 / year
Not applicable: 32Protected by Waratek: 1 Medium: 1High: 30Critical: 2 not blocked: 32blocked by ARMR today: 1 Exploited: 33
20152 Not applicable2 High2 not blocked2 Exploited2 20160 20170 20180 20198 Not applicable8 High8 not blocked8 Exploited8 20203 Not applicable3 High3 not blocked3 Exploited3 20213 Protected by Waratek1 Not applicable2 Critical1 High2 blocked by ARMR today1 not blocked2 Exploited3 20223 Not applicable3 Critical1 High2 not blocked3 Exploited3 20233 Not applicable3 High2 Medium1 not blocked3 Exploited3 20243 Not applicable3 High3 not blocked3 Exploited3 20254 Not applicable4 High4 not blocked4 Exploited4 20264 Not applicable4 High4 not blocked4 Exploited4
201520162017201820192020202120222023202420252026
33 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-81963 High 2026-09-08 Not applicable Exploited Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
CVE-2026-45586 High 2026-06-09 Not applicable Exploited Improper link resolution before file access ('link following') in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally.
CVE-2026-41091 High 2026-05-20 Not applicable Exploited Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
CVE-2026-25187 High 2026-03-10 Not applicable Exploited Improper link resolution before file access ('link following') in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2025-60710 High 2025-11-11 Not applicable Exploited Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally.
CVE-2025-48384 High 2025-07-08 Not applicable Exploited Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.
CVE-2025-21391 High 2025-02-11 Not applicable Exploited Windows Storage Elevation of Privilege Vulnerability
CVE-2024-57728 High 2025-01-15 Not applicable Exploited SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.
CVE-2024-44258 High 2024-10-28 Not applicable Exploited This issue was addressed with improved handling of symlinks. This issue is fixed in iOS 17.7.1 and iPadOS 17.7.1, iOS 18.1 and iPadOS 18.1, tvOS 18.1, visionOS 2.1. Restoring a maliciously crafted backup file may lead to modification of protected system files.
CVE-2024-21447 High 2024-04-09 Not applicable Exploited Windows Authentication Elevation of Privilege Vulnerability
CVE-2024-28916 High 2024-03-21 Not applicable Exploited Xbox Gaming Services Elevation of Privilege Vulnerability
CVE-2023-34723 High 2023-08-25 Not applicable Exploited An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows attackers to gain sensitive information via /config/system.conf.
CVE-2023-36874 High 2023-07-11 Not applicable Exploited Windows Error Reporting Service Elevation of Privilege Vulnerability
CVE-2022-45440 Medium 2023-01-17 Not applicable Exploited A vulnerability exists in the FTP server of the Zyxel AX7501-B0 firmware prior to V5.17(ABPC.3)C0, which processes symbolic links on external storage media. A local authenticated attacker with administrator privileges could abuse this vulnerability to access the root file system by creating a symbolic link on external storage media, such as a USB flash drive, and then logging into the FTP server on a vulnerable device.
CVE-2022-30333 Critical 2022-05-09 Not applicable Exploited RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
CVE-2022-21999 High 2022-02-09 Not applicable Exploited Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2022-21919 High 2022-01-11 Not applicable Exploited Windows User Profile Service Elevation of Privilege Vulnerability
CVE-2021-41379 High 2021-11-10 Not applicable Exploited Windows Installer Elevation of Privilege Vulnerability
CVE-2021-21479 Critical 2021-02-09 Protected by Waratek Exploited In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.
CVE-2020-36193 High 2021-01-18 Not applicable Exploited Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-0787 High 2020-03-12 Not applicable Exploited An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
CVE-2020-0683 High 2020-02-11 Not applicable Exploited An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.
CVE-2020-0638 High 2020-01-14 Not applicable Exploited An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.
CVE-2019-1385 High 2019-11-12 Not applicable Exploited An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka 'Windows AppX Deployment Extensions Elevation of Privilege Vulnerability'.
CVE-2019-1315 High 2019-10-10 Not applicable Exploited An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1339, CVE-2019-1342.
CVE-2019-1253 High 2019-09-11 Not applicable Exploited An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.
CVE-2019-1130 High 2019-07-15 Not applicable Exploited An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1129.
CVE-2019-1129 High 2019-07-15 Not applicable Exploited An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1130.
CVE-2019-1069 High 2019-06-12 Not applicable Exploited An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system. To exploit the vulnerability, an attacker would require unprivileged code execution on a victim system. The security update addresses the vulnerability by correctly validating file operations.
CVE-2019-1064 High 2019-06-12 Not applicable Exploited An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The security update addresses the vulnerability by correcting how Windows AppX Deployment Service handles hard links.
CVE-2019-0841 High 2019-04-09 Not applicable Exploited An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0836.
CVE-2015-5287 High 2015-12-07 Not applicable Exploited The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
CVE-2015-1130 High 2015-04-10 Not applicable Exploited The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.