Beveiligingsadvies

CVE-2026-61371

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-15 00:00:00

Laatst bijgewerkt 2026-07-15 19:26:26

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The destructive effect is performed at open-time via O_TRUNC, and can happen before full input validation completes (“truncation-before-validation”).

← Alle CVE's bekijken Bekijk op cve.org ↗