CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreDLL side loading vulnerability in MA for Windows8.2 High
- seatd project seatdseatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and...8.8 High
- nextcloud desktop, kiteworks security-advisories +1 moreUntrusted Search Path in Nextcloud Desktop Client7.3 High
- lenovo driver management, drivers management +1 moreA DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719...7.3 High
- fedoraproject fedora, p5-encode project p5-encode +1 moreEncode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a...7.8 High
- dell emc powerscale onefs, powerscale onefs +1 moreDell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability...4.4 Medium
- teradici pcoip standard agentThe OpenSSL component of the Teradici PCoIP Standard Agent prior to version 21.07.0 was compiled...7.8 High
- teradici pcoip clientThe OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled...7.8 High
- overwolf, overwolf ltd. the installer of overwolf +1 moreUntrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an...7.8 High
- fujitsu scansnap manager, fujitsu limited and pfu limited the installers of scansnap manager and the software download installer +1 moreUntrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7...7.8 High
- gog galaxyGalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and...7.8 High
- erlang project erlang/otp, erlang erlang\/otp +1 moreA local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3....7.0 High
- dolby audio x2The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain...7.8 High
- ca ehealth performance manager** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...8.8 High
- broadcom ca ehealth performance manager, ehealth +1 more** UNSUPPORTED WHEN ASSIGNED ** CA eHealth Performance Manager through 6.3.2.12 is affected by...7.8 High
- adobe creative cloud desktop application, creative cloud (desktop component) +1 moreAdobe Creative Cloud Unquoted Service Path in CCXProcess6.5 Medium
- f5 access policy manager clients, big-ip access policy manager +1 moreIn Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1...7.8 High
- adobe dreamweaverAdobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information Disclosure6.2 Medium
- acronis true imageAcronis True Image for Windows prior to 2021 Update 3 allowed local privilege escalation due to a...7.8 High
- git-lfs, git large file storage project large file storage +1 moreGit LFS can execute a Git binary from the current directory on Windows7.2 High
- sky co., ltd. skysea client viewUntrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver...7.8 High
- soundresearch dchu model software component modulesThe SECOMN service in Sound Research DCHU model software component modules (APO) through 2.0.9.17...7.8 High
- xen, debian linux, fedoraproject fedora +2 moreAn issue was discovered in Xen through 4.14.x. A guest may access xenstore paths via absolute...6.0 Medium
- seiko epson corporation the installers of multiple seiko epson products, epson album print, color calibration utility +31 more +33 moreUntrusted search path vulnerability in the installers of multiple SEIKO EPSON products allows an...7.8 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows (includes...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2020 +3 more +5 moreTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could...7.8 High
- trend micro security (consumer), trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2020 +3 more +5 moreTrend Micro Security 2020 (Consumer) contains a vulnerability in the installer package that could...7.8 High
- check point endpoint security client for windows, checkpoint endpoint security +1 moreCheck Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades...6.5 Medium
- sonicwall global vpn clientSonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to...7.8 High
- check point zonealarm point zonealarm, checkpoint zonealarm +1 moreCheck Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges...7.8 High
- nvidia geforce experience, geforce experience software +1 moreNVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA...7.8 High
- lenovo diagnosticsA DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that...7.8 High
- huawei p30 pro, p30 pro firmware +1 moreHUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability....4.6 Medium
- getmonero moneromonero-wallet-gui in Monero GUI 0.17.0.1 includes the . directory in an embedded RPATH (with a...7.8 High
- eaton 9000x programming and configuration softwareDLL Hijacking7.8 High
- installbuilderInstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a...7.8 High
- postgresqlThe Windows installer for PostgreSQL 9.5 - 12 invokes system-provided executables that do not...7.3 High
- mcafee agent, mcafee llc ma for windows +1 moreDLL Injection vulnerability in MA for Windows6.0 Medium
- ibm aspera connectIBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system,...7.8 High
- 163 netease mail masterGuangzhou NetEase Mail Master 4.14.1.1004 on Windows has a DLL hijacking vulnerability. Attackers...7.8 High
- tencent timShenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be...7.8 High
- 163 netease youdao dictionaryNetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers...7.8 High
- 360 speed browser360 Speed Browser 12.0.1247.0 has a DLL hijacking vulnerability, which can be exploited by...7.8 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreUntrusted Search Path in PostgreSQL7.3 High
- osisoft pi api, pi buffer subsystem, pi connector +6 more +8 moreIn OSIsoft PI System multiple products and versions, a local attacker can modify a search path...7.8 High
- lenovo drivers managementA DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7...7.3 High
- 360totalsecurity 360 total securityIn the version 12.1.0.1005 and below of 360 Total Security, when the Gamefolde calls GameChrome...7.8 High
- 360totalsecurity 360 total securityIn version 12.1.0.1004 and below of 360 Total Security,when TPI calls the browser process, there...7.8 High
- 360totalsecurity 360 total securityIn the version 12.1.0.1004 and below of 360 Total Security, when the main process of 360 Total...7.8 High
- asus screenpad2 upgrade toolAsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool...7.8 High
- Show moreLoading…