CVE-2026-41091
Published May 20, 2026Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.
- evidence mentions
- 23
- Buzz score
- 79.0
Daily materialized evidence profile
CWE CWE-59
This factual profile is rebuilt from stored cvebuzz evidence each day. It is a timestamped snapshot, not an immutable publication.
Refreshed UTC
Stored evidence summary
- Sample size
- 1,656
- CVEs with mentions
- 465
- Total mentions
- 1,353
- CVEs with KEV
- 23
- CVEs with PoC
- 9
Attack vector counts
- Network
- 335
- Adjacent network
- 5
- Local
- 1,292
- Physical
- 24
Top snapshot Buzz entries
Up to five denormalized entries captured by the same daily profile refresh.
CVE-2022-30333
Published May 9, 2022RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_k…
- evidence mentions
- 13
- Buzz score
- 71.4
CVE-2019-1069
Published Jun 12, 2019An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability co…
- evidence mentions
- 11
- Buzz score
- 69.8
CVE-2020-0787
Published Mar 12, 2020An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intellige…
- evidence mentions
- 10
- Buzz score
- 69.0
CVE-2025-48384
Published Jul 8, 2025Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading…
- evidence mentions
- 9
- Buzz score
- 68.0