THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-4211 — Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the u

[NVD] CVE-2025-4211 — Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the u

lownvdPublished 2025-05-16

CVE-2025-4211 CVSS: None Published: 2025-05-16T14:15:32.233

Improper Link Resolution Before File Access ('Link Following') vulnerability in QFileSystemEngine in the Qt corelib module on Windows which potentially allows Symlink Attacks and the use of Malicious Files. Issue originates from CVE-2024-38081. The vulnerability arises from the use of the GetTempPath API, which can be exploited by attac

Indicators of compromise

CVE-2025-4211cve
CVE-2024-38081cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-4211