symlink vulnerabilities

  1. CVE-2025-49738: Critical Link Following Vulnerability in Microsoft PC Manager

    Improper link resolution before file access, often referred to as "link following," represents a recurring and serious class of vulnerabilities in modern software, and with the disclosure of CVE-2025-49738 in Microsoft PC Manager, this long-standing issue has found a new foothold in a widely...
  2. Understanding and Mitigating CVE-2025-49680: Windows Performance Recorder Link Vulnerability

    Windows Performance Recorder (WPR) has long stood as one of the primary tools for collecting diagnostic and performance data on Windows systems, offering granular detail to system administrators, performance engineers, and advanced users troubleshooting performance issues. Yet, in its intricate...
  3. April 2025 Windows Update Introduces inetpub Folder and Symlink Security Risks

    Microsoft's recent April 2025 patch for Windows introduced a curious and controversial change that has IT administrators and security experts buzzing—a mysterious "inetpub" folder appearing by default on systems, including those not using Internet Information Services (IIS). Far from a mere...
  4. Understanding the 'inetpub' Folder and CVE-2025-21204 Mitigation in Windows Update

    Microsoft’s recent April 2025 patch cycle for Windows 10 and Windows 11 has sparked a wave of both intrigue and concern across the IT community due to the unexpected appearance of the “inetpub” folder on users’ system drives, usually the C: drive. This folder, historically associated with...