7.8
Élevée
CVE-2026-102204 Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized…
Description
Improper link resolution before file access ('link following') in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Defender for Endpoint for Linux | Versions non publiées | |
| Windows Subsystem for Linux (WSL2) 3.0 | premières → < 3.0.1 | 3.0.1 |
Références
- Windows Subsystem for Linux Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Defender for Endpoint for Linux
Les 8 CVE de Microsoft Defender for Endpoint for Linux →
CVE-2026-21537
Improper control of generation of code ('code injection') in Microsoft Defender for Linux allows an unauthorized…
8.8
Élevée
CVE-2025-59497
Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Linux allows an authorized attacker to…
7.0
Élevée
CVE-2025-47161
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally
7.8
Élevée
CVE-2025-26684
External control of file name or path in Microsoft Defender for Endpoint allows an authorized attacker to elevate…
6.7
Moyenne