CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreTrend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL...7.8 High
- apple itunes, itunes for windows, macos +1 more +3 moreA dynamic library loading issue existed in iTunes setup. This was addressed with improved path...7.8 High
- acer quick accessIn the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027...7.8 High
- barco clickshare button r9861500d01 firmwareBarco ClickShare Button R9861500D01 devices before 1.9.0 have Missing Support for Integrity Check...7.8 High
- intel control center-iUnquoted service path in Control Center-I version 2.1.0.0 and earlier may allow an authenticated...7.8 High
- ibm db2 high performance unload load for luw, db2 high performance unload load +1 moreIBM DB2 High Performance Unload load for LUW 6.1 and 6.5 could allow a local attacker to execute...7.4 High
- sony catalyst browse, catalyst production suite +1 moreIn Sony Catalyst Production Suite through 2019.1 (1.1.0.21) and Catalyst Browse through 2019.1 (1...7.8 High
- autodesk desktopDLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus \+ security 2020 +3 more +5 moreTrend Micro Security (Consumer) 2020 (v16.0.1221 and below) is affected by a DLL hijacking...7.8 High
- eracent epa agentAn issue was discovered in Eracent EPA Agent through 10.2.26. The agent executable, when...7.8 High
- lenovo system interface foundationA potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1...7.8 High
- code42Code42 server through 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a...7.3 High
- code42Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations,...7.3 High
- comodo internet securityAn issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL...7.8 High
- adobe illustrator ccAdobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking)...7.8 High
- adobe animate ccAdobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking)...7.8 High
- mcafee total protection, mcafee,llc mcafee total protection, mcafee anti-virus plus +1 more +3 moreImplicit loading of DLLs6.1 Medium
- nvidia geforce experience, windows gpu display driver, gpu driver +2 moreNVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions)...6.5 Medium
- nvidia geforce experienceNVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability when GameStream...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in NVIDIA Control Panel...6.5 Medium
- teamviewerA DLL side loading vulnerability in the Windows Service in TeamViewer versions up to 11.0.133222 ...6.7 Medium
- avast antivirus, avg anti-virus +1 moreAn issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL...7.8 High
- nsa ghidraNSA Ghidra through 9.0.4 uses a potentially untrusted search path. When executing Ghidra from a...7.8 High
- nsa ghidraNSA Ghidra before 9.0.2 is vulnerable to DLL hijacking because it loads jansi.dll from the...7.8 High
- avira software updaterAvira Software Updater before 2.0.6.21094 allows a DLL side-loading attack.6.7 Medium
- dell encryption enterprise, endpoint security suite enterprise, encryption +2 moreThe vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10...6.7 Medium
- jetbrains resharperJetBrains ReSharper installers for versions before 2019.2 had a DLL Hijacking vulnerability.7.3 High
- jetbrains riderJetBrains Rider before 2019.1.2 was using an unsigned JetBrains.Rider.Unity.Editor.Plugin...7.8 High
- totaldefense anti-virusIn Total Defense Anti-virus 9.0.0.773, resource acquisition from the untrusted search path C:\...7.8 High
- schneider electric somachine hvacA CWE-426: Untrusted Search Path vulnerability exists in SoMachine HVAC v2.4.1 and earlier...7.8 High
- hewlett packard enterprise data protectorPrivileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04...7.8 High
- mcafee total protection, mcafee, llc mcafee total protection - free antivirus trial +1 moreMcAfee Total Protection - Free Antivirus Trial: DLL Search Order Hijacking vulnerability6.9 Medium
- adobe application managerAdobe application manager installer version 10.0 have an Insecure Library Loading (DLL hijacking)...7.8 High
- checkpoint endpoint security, capsule docs standalone client, remote access clients +2 moreCheck Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a...7.8 High
- autodesk design reviewDLL preloading vulnerability in Autodesk Design Review versions 2011, 2012, 2013, and 2018. An...7.8 High
- trendmicro ransom buster, trend micro ransom buster, trend micro security (consumer), trendmicro antivirus \+ security 2019 +3 more +5 moreA DLL hijacking vulnerability exists in the Trend Micro Security's 2019 consumer family of...7.8 High
- bitdefender antivirus 2020An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions 1.0.15.119 and...7.8 High
- trend micro password manager, trend micro, inc. micro password manager +1 moreA DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited,...7.8 High
- trend micro password manager, trend micro, inc. micro password manager +1 moreA DLL hijacking vulnerability exists in Trend Micro Password Manager 5.0 in which, if exploited,...7.8 High
- lenovo paperdisplay hotkey service, yoga 700-11isk firmware, yoga 700-14isk firmware +2 moreA DLL search path vulnerability was reported in PaperDisplay Hotkey Service version 1.2.0.8 that...7.3 High
- rapid7 insightappsecRapid7 InsightAppSec Local Privilege Escalation7.8 High
- adobe premiere pro ccAdobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking...7.8 High
- adobe prelude ccAdobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking)...7.8 High
- adobe character animatorAdobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking...7.8 High
- adobe after effectsAdobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking)...7.8 High
- cpanelcPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).7.5 High
- trend micro officescanA DLL side-loading vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow an...7.8 High
- akeo rufusAkeo Consulting Rufus 3.0 and earlier is affected by: DLL search order hijacking. The impact is:...7.8 High
- adobe dreamweaverAdobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an...7.8 High
- logmeininc join.meIn LogMeIn join.me before 3.16.0.5505, an attacker could execute arbitrary commands on a targeted...8.8 High
- Show moreLoading…