CWE-1386.

Veeam Backup for Microsoft 365: A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM…

• Veeam Backup for Microsoft 365
• CWE-1386

Root.Mkdir(All) can follow junctions out of the root on Windows in os

• CWE-1386

<1.26.9 || >=1.27.0-0, <1.27.2 · fixed in 1.26.9, 1.27.2

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.

• Veeam Agent for Windows
• CWE-1386

Dell Inventory Collector Client: Dell Inventory Collector Client, versions prior to 13.8.0…

• Dell Inventory Collector Client
• CWE-1386

Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store

• Gen Digital Norton Secure VPN
• CWE-1386

A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.

• AMD μProf
• CWE-1386

Local privilege escalation in ESET products for Windows

• ESET, spol. s r.o. ESET NOD32 Antivirus
• ESET, spol. s r.o. ESET Internet Security
• CWE-1386

Dell DUP Framework: DUP framework version 4.9.4.36 and prior contains insecure operation on Windows…

• Dell DUP Framework
• CWE-1386

Dell Display Manager: Dell Display Manager application, version 2.1.1.17 and prior…

• Dell Display Manager
• CWE-1386

HashiCorp Vagrant Insecure Operation on Windows Junction / Mount Point vulnerability

• Path traversal
• CWE-1386

<2.4.0 · fixed in 2.4.0

Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)

• SAP_SE SAP BusinessObjects Suite (Installer)
• CWE-1386

Dell Digital Delivery: Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows…

• Dell Digital Delivery
• CWE-1386

Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.

• Dell Command Update (DCU)
• CWE-1386

Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.

• Dell Command Update (DCU)
• CWE-1386

Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation.

• Dell Command Update (DCU)
• CWE-1386

Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation.

• Dell Command Integration Suite for System Center (DCIS)
• CWE-1386

Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component.

• Dell Command Update (DCU)
• CWE-1386

NVIDIA GeForce Experience: NVIDIA GeForce Experience contains a vulnerability in the installer…

• NVIDIA GeForce Experience
• CWE-1386