Lunbun

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally.

Incorrect resource transfer between spheres in Windows Error Reporting allows an authorized attacker to elevate privileges locally, which can lead to an impact on the system.

Incorrect authorization in the Windows Text Services Framework allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system.

An absolute path traversal issue exists in the Windows Encrypting File System (EFS). This allows an authorized attacker to elevate privileges over a network.

Improper authorization in the Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally, which can lead to full system compromise.

An absolute path traversal issue exists that allows an authorized attacker to disclose sensitive information over a network.

Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system.

An issue exists in 7-Zip where symbolic links are not always properly handled during the extraction of archives. This flaw allows a remote attacker to use a specially crafted archive to perform arbitrary file writes, which can lead to the overwriting of critical system files and potentially result in remote code execution. This issue specifically affects 7-Zip on Linux-based operating systems by bypassing security restrictions through the incorrect identification of symbolic links before file access.