CWE-363.

filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses

• CWE-363

>=3.30.0, <4.2.1 · fixed in 4.2.1

filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory

• Path traversal
• CWE-363

>=4.1.0, <4.2.1 · fixed in 4.2.1

filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files

• Path traversal
• CWE-363

>=3.20.4, <4.2.1 · fixed in 4.2.1

Cockpit-files: cockpit-files: arbitrary file ownership and permission modification via symlink race condition

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-363

Cockpit-files: cockpit-files: local attacker can hijack file ownership via symlink race

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-363

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).

• Oracle Corporation Oracle VM VirtualBox
• CWE-363

HP Image Assistant - Potential Escalation of Privilege

• HP Inc HP Image Assistant
• CWE-363

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

• CWE-61
• CWE-363

<0.5.7 · fixed in 0.5.7

youki container escape via "masked path" abuse due to mount race conditions

• CWE-61
• CWE-363

<0.5.7 · fixed in 0.5.7

runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects

• CWE-61
• CWE-363

<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3 · fixed in 1.2.8, 1.3.3, 1.4.0-rc.3

runc container escape with malicious config due to /dev/console mount and related races

• CWE-61
• CWE-363

>=1.0.0-rc3, <1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3 · fixed in 1.2.8, 1.3.3, 1.4.0-rc.3

runc container escape via "masked path" abuse due to mount race conditions

• CWE-61
• CWE-363

<1.2.8 || >=1.3.0-rc.1, <1.3.3 || >=1.4.0-rc.1, <1.4.0-rc.3 · fixed in 1.2.8, 1.3.3, 1.4.0-rc.3

runc can be confused to create empty files/directories on the host

• CWE-61
• CWE-363

<1.1.14 || >=1.2.0-rc.1, <1.2.0-rc.3 · fixed in 1.1.14, 1.2.0-rc.3

Pterodactyl Wings vulnerable to improper isolation of server file access

• Path traversal
• Race condition

<1.11.9 · fixed in 1.11.9

Race condition in std::fs::remove_dir_all in rustlang

• rust
• Race condition
• CWE-363

Endpoint Security for Linux Threat Prevention (ENSLTP) privilege escalation vulnerability

• McAfee Endpoint Security for Linux Threat Prevention (ENSLTP)
• CWE-274
• CWE-363