Description
Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.0 | Impact: 3.6Attack Vector: Local
Complexity: High
Privileges: Low
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None
Affected Packages2 packages
🔴Vulnerability Details
2GHSAGHSA-px7f-389h-299v: Improper link resolution before file access ('link following') in Windows App for Mac allows an authorized attacker to elevate privileges locally↗2026-02-10 CVEListWindows App for Mac Installer Elevation of Privilege Vulnerability↗2026-02-10 📋Vendor Advisories
1MicrosoftWindows App for Mac Installer Elevation of Privilege Vulnerability↗2026-02-10