CVE-2026-61371 | Microsoft AVML up to 0.16.x Symlink open destination symlink

July 15, 2026 Yanac

A vulnerability was found in Microsoft AVML up to 0.16.x and classified as problematic. This issue affects the function Open of the component Symlink Handler. Executing a manipulation of the argument destination can lead to symlink following.

This vulnerability is handled as CVE-2026-61371. It is possible to launch the attack on the local host. There is not any exploit available.VulDB Recent EntriesRead More