CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- rapid7 nexposeAll editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading...7.8 High
- puttyMultiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute...7.8 High
- snortUntrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute...8.8 High
- idrix truecrypt, veracrypt +1 moreUntrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before...7.8 High
- openbsd opensshUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...7.3 High
- vmware workstation player, workstation pro +1 moreUntrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0...7.8 High
- microsoft auto updater for macUntrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain...7.8 High
- git for windows project for windowsUntrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges...7.8 High
- vmware esxi, fusion, tools +2 more +4 moreUntrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0...7.8 High
- atom electronHigh severity vulnerability that affects electron7.8 High
- adobe flash player, air desktop runtime, air sdk +2 more +4 moreUntrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x...7.3 High
- microsoft windows 10, windows 7, windows 8 +2 more +4 moreMicrosoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and...7.3 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...7.8 High
- microsoft windows 10, windows 7, windows 8 +6 more +8 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,...7.8 High
- cisco anyconnect secure mobility clientUntrusted search path vulnerability in the CMainThread::launchDownloader function in...7.2 High
- mcafee epo deep commandMultiple unquoted Windows search path vulnerabilities in the (1) Client Management and (2)...7.2 High
- microsoft windows 7, windows 8, windows 8.1 +6 more +8 moreUntrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2,...9.3 High
- microsoft windows 7, windows 8, windows 8.1 +7 more +9 moreUntrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...6.9 Medium
- datev grundpaket basisMultiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe...9.3 High
- pthread-win32 project pthreads-win32Untrusted search path vulnerability in the pthread_win32_process_attach_np function in pthreadGC2...6.9 Medium
- microsoft office, visual basic for applications (vba), visual basic for applications +1 more +3 moreUntrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3,...6.9 Medium
- adobe air, flash player, opensuse +1 more +3 moreUntrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and...9.3 High
- microsoft internet explorerUntrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2...9.3 High
- google chrome** DISPUTED ** Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as...7.1 High
- foxitsoftware foxit readerUntrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain...9.3 High
- gnome gtkUntrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24...9.3 High
- gnome gtkUntrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows...6.9 Medium
- ponsoftware explzhUntrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain...6.9 Medium
- microsoft visual studio, visual studio .net, apple itunes +1 more +3 moreUntrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft...9.3 High
- fedoraproject fedora, gnome libpeas +1 moreUntrusted search path vulnerability in the Python module in gedit allows local users to execute...6.9 Medium
- python, canonical ubuntu linux, fedoraproject fedora +2 moreUntrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier,...6.9 Medium
- actian ingresUntrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4...7.2 High