Vulnerabilities (CVE)

Filtered by CWE-1386
Total 6 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-36340 2025-05-13 N/A 6.6 MEDIUM
A junction point vulnerability within AMD uProf can allow a local low-privileged attacker to create junction points, potentially resulting in arbitrary file deletion or disclosure.
CVE-2023-40623 1 Sap 1 Businessobjects 2024-11-21 N/A 6.2 MEDIUM
SAP BusinessObjects Suite Installer - version 420, 430, allows an attacker within the network to create a directory under temporary directory and link it to a directory with operating system files. On successful exploitation the attacker can delete all the operating system files causing a limited impact on integrity and completely compromising the availability of the system.
CVE-2023-32474 1 Dell 1 Display Manager 2024-11-21 N/A 6.6 MEDIUM
Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could potentially exploit this vulnerability during installation leading to arbitrary folder or file deletion
CVE-2023-32470 1 Dell 1 Digital Delivery 2024-11-21 N/A 5.0 MEDIUM
Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could potentially exploit this vulnerability to create arbitrary folder leading to permanent Denial of Service (DOS).
CVE-2023-32454 1 Dell 1 Update Package Framework 2024-11-21 N/A 6.3 MEDIUM
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service
CVE-2024-7400 2024-09-30 N/A N/A
The vulnerability potentially allowed an attacker to misuse ESET’s file operations during the removal of a detected file on the Windows operating system to delete files without having proper permissions to do so.