Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-56857

Опубликовано: 11 окт. 2026
Источник: msrc
CVSS3: 9.8
EPSS Низкий

Описание

Root.Mkdir(All) can follow junctions out of the root on Windows in os

EPSS

Процентиль: 46%
0.00553
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 1 месяца назад

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).

CVSS3: 3.3
redhat
около 1 месяца назад

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).

CVSS3: 9.8
nvd
около 1 месяца назад

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).

CVSS3: 9.8
debian
около 1 месяца назад

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a juncti ...

CVSS3: 9.8
github
около 1 месяца назад

On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the last path component is a junction (path/to/junction, but not path/junction/target).

EPSS

Процентиль: 46%
0.00553
Низкий

9.8 Critical

CVSS3