<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-1386</title><description>Every new CWE-1386 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2025-64394: Veeam Backup for Microsoft 365: A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM…</title><link>https://agentprime.io/advisories/CVE-2025-64394/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64394/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 27 Oct 2026 16:16:58 GMT</pubDate><category>CVE</category></item><item><title>Root.Mkdir(All) can follow junctions out of the root on Windows in os</title><link>https://agentprime.io/advisories/GO-2026-6604/</link><guid isPermaLink="true">https://agentprime.io/advisories/GO-2026-6604/</guid><description>stdlib &lt;1.26.9 || &gt;=1.27.0-0, &lt;1.27.2, fixed in 1.26.9, 1.27.2. CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by OSV. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 22:31:09 GMT</pubDate><category>Go</category><category>stdlib</category><category>critical</category></item><item><title>CVE-2025-64391: This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.</title><link>https://agentprime.io/advisories/CVE-2025-64391/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-64391/</guid><description>CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 07 Oct 2026 08:49:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41116: Dell Inventory Collector Client: Dell Inventory Collector Client, versions prior to 13.8.0…</title><link>https://agentprime.io/advisories/CVE-2026-41116/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41116/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 17:31:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-58074: Privilege escalation during the installation of Norton Secure VPN via the Microsoft Store</title><link>https://agentprime.io/advisories/CVE-2025-58074/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-58074/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 04 May 2026 13:11:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-36340: A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.</title><link>https://agentprime.io/advisories/CVE-2024-36340/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-36340/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 May 2025 14:04:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-7400: Local privilege escalation in ESET products for Windows</title><link>https://agentprime.io/advisories/CVE-2024-7400/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-7400/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Sep 2024 07:02:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32454: Dell DUP Framework: DUP framework version 4.9.4.36 and prior contains insecure operation on Windows…</title><link>https://agentprime.io/advisories/CVE-2023-32454/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32454/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Feb 2024 08:00:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32474: Dell Display Manager: Dell Display Manager application, version 2.1.1.17 and prior…</title><link>https://agentprime.io/advisories/CVE-2023-32474/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32474/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 06 Feb 2024 07:53:22 GMT</pubDate><category>CVE</category></item><item><title>HashiCorp Vagrant Insecure Operation on Windows Junction / Mount Point vulnerability</title><link>https://agentprime.io/advisories/GHSA-47xw-vw6m-w9fq/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-47xw-vw6m-w9fq/</guid><description>github.com/hashicorp/vagrant &lt;2.4.0, fixed in 2.4.0. CVSS 3.8 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Sat, 28 Oct 2023 00:30:31 GMT</pubDate><category>Go</category><category>github.com/hashicorp/vagrant</category></item><item><title>CVE-2023-40623: Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)</title><link>https://agentprime.io/advisories/CVE-2023-40623/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-40623/</guid><description>CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 12 Sep 2023 02:02:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32470: Dell Digital Delivery: Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows…</title><link>https://agentprime.io/advisories/CVE-2023-32470/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32470/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 08 Sep 2023 05:04:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28065: Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.</title><link>https://agentprime.io/advisories/CVE-2023-28065/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28065/</guid><description>CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jun 2023 11:04:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-28071: Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerability.</title><link>https://agentprime.io/advisories/CVE-2023-28071/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-28071/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Jun 2023 10:37:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23697: Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation.</title><link>https://agentprime.io/advisories/CVE-2023-23697/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23697/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Feb 2023 07:24:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-24572: Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation.</title><link>https://agentprime.io/advisories/CVE-2023-24572/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24572/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Feb 2023 07:15:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23698: Dell Command | Update, Dell Update, and Alienware Update versions before 4.6.0 and 4.7.1 contain Insecure Operation on Windows Junction in the installer component.</title><link>https://agentprime.io/advisories/CVE-2023-23698/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23698/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Feb 2023 12:20:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-42291: NVIDIA GeForce Experience: NVIDIA GeForce Experience contains a vulnerability in the installer…</title><link>https://agentprime.io/advisories/CVE-2022-42291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-42291/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Feb 2023 02:16:07 GMT</pubDate><category>CVE</category></item></channel></rss>