Advisories · Weakness
Path traversal.
File paths that escape the directory they should stay in. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 8.7 High
Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack
- coderaiser cloudcmd
- Path traversal
- CVSS 7.8 High
Busybox: busybox: dpkg-deb extraction-root escape via per-ar-member deferred symlink flush
- Red Hat Hardened Images
- Path traversal
- CVSS 10.0 CriticalCritical · CVSS 9+
File Upload to Order < 1.1.4 - Unauthenticated Arbitrary File Deletion
- File Upload to Order
- Path traversal
- CVSS 8.6 High
Ultimate Multisite < 2.17.2 - Unauthenticated LFI via 'attributes' Parameter
- Ultimate Multisite
- Path traversal
- CVSS 3.7 Low
Path traversal in Ubiquiti Inc UniFi Protect AI Key
- Ubiquiti Inc UniFi Protect AI Key
- Path traversal
- CVSS 3.7 Low
Path traversal in Ubiquiti Inc UniFi Protect AI Key
- Ubiquiti Inc UniFi Protect AI Key
- Path traversal
- CVSS 8.7 High
External control of a file path in ONLYOFFICE Document Server
- ONLYOFFICE Document Server
- Path traversal
- CVSS 5.1 Medium
Arbitrary file read and write
- Citrix UniconOS
- Path traversal
- CVSS 5.5 Medium
CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe Content Credentials Rust SDK
- Adobe C2PA Tool
- Path traversal
- CVSS 7.8 High
Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Path traversal
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2
GHSA-w6wh-p4g7-mpj2 · CVE-2026-96225 - CVSS 7.8 High
Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability
- Path traversal
>=8.0.0, <8.0.32 || >=9.0.0, <9.0.21 || >=10.0.0, <10.0.13 || >=11.0.0-preview.1, <11.0.0-rc.2 · fixed in 8.0.32, 9.0.21, 10.0.13, 11.0.0-rc.2
GHSA-2j93-m82w-73j2 · CVE-2026-96231 - CVSS 9.3 CriticalCritical · CVSS 9+
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Path traversal
- CVSS 5.5 Medium
IBM WebSphere Application Server Liberty Path Traversal
- IBM WebSphere Application Server - Liberty
- Path traversal
- CVSS 8.7 High
Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter
- Omnispace Agora Project
- Path traversal
- CVSS 7.7 High
Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- Adobe Experience Manager 6.5 LTS
- Adobe Experience Manager 6.5
- Path traversal
- CVSS 7.0 High
Windows Backup Engine Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 8.8 High
Dynamics Business Central Elevation of Privilege Vulnerability
- Microsoft Dynamics NAV 2018
- Path traversal
- CVSS 7.8 High
Windows Subsystem for Linux Elevation of Privilege Vulnerability
- Microsoft Windows Subsystem for Linux (WSL2)
- Path traversal
- CVSS 7.8 High
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Path traversal
- CVSS 5.5 Medium
Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
- Microsoft Windows 11 Version 24H2
- Microsoft Windows 11 Version 25H2
- Path traversal
- CVSS 7.8 High
Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows WalletService Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 8.1 High
Skype for Business Elevation of Privilege Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Path traversal
- CVSS 8.8 High
Skype for Business Remote Code Execution Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Path traversal
- CVSS 5.5 Medium
Microsoft Defender Information Disclosure Vulnerability
- Microsoft Windows Defender
- Path traversal
- CVSS 5.5 Medium
Windows Projected File System Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 7.8 High
Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows Portable Device Enumerator Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows Host Guardian Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 5.5 Medium
Windows Update Orchestrator Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 8.8 High
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 7.8 High
Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 6.5 Medium
Windows Encrypting File System (EFS) Information Disclosure Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows User Profile Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 5.5 Medium
Windows Update Orchestrator Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 7.8 High
Windows Update Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Path traversal
- CVSS 5.5 Medium
Windows Backup Engine Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 6.5 Medium
Microsoft Office SharePoint Information Disclosure Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 7.3 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Path traversal
- CVSS 6.7 Medium
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Path traversal
- CVSS 7.3 High
.NET Elevation of Privilege Vulnerability
- Microsoft .NET 10.0 runtime
- Microsoft .NET 11.0 runtime
- Path traversal
- CVSS 8.8 High
Microsoft Office SharePoint Remote Code Execution Vulnerability
- Microsoft SharePoint Server Subscription Edition
- Path traversal
- CVSS 7.8 High
Windows AppX Deployment Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows Hyper-V Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows Registry Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 7.8 High
Windows Shell Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 4.7 Medium
Windows Internet (wininet.dll) Tampering Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.0 High
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 8.8 High
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Microsoft Windows Search Component Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- Path traversal
- CVSS 7.8 High
Windows Update Elevation of Privilege Vulnerability
- Microsoft Windows 11 version 23H2
- Microsoft Windows 11 Version 24H2
- Path traversal
- CVSS 6.5 Medium
Windows libarchive Tampering Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 4.7 Medium
Windows AppX Deployment Service Information Disclosure Vulnerability
- Microsoft Windows 10 Version 21H2
- Microsoft Windows 10 Version 22H2
- Path traversal
- CVSS 6.5 Medium
Windows libarchive Tampering Vulnerability
- Microsoft Windows 10 Version 1809
- Microsoft Windows 10 Version 21H2
- Path traversal
- CVSS 9.6 CriticalCritical · CVSS 9+
Visual Studio Code Remote Code Execution Vulnerability
- Microsoft Visual Studio Code
- Path traversal
- CVSS 6.8 Medium
Visual Studio Code Information Disclosure Vulnerability
- Microsoft Visual Studio Code
- Path traversal
- CVSS 8.8 High
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
- Microsoft Dynamics NAV 2018
- Path traversal
- CVSS 6.7 Medium
MP Manager through 1.1.0 Path Traversal via Archive Extraction sanitizeEntryName Bypass
- Abdurazaaq Mohammed MP Manager
- Path traversal
- CVSS 4.6 Medium
Fossify File Manager through 1.6.2 Zip Slip Path Traversal via DecompressActivity
- Fossify File Manager
- Path traversal