CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- electron electron-builderelectron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)7.3 High
- zoom, zoom communications inc. clients, zoom meeting software development kit +2 more +4 moreZoom Clients - Untrusted Search Path7.2 High
PanelSwWix4.SdkNuGetPanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges8.2 HighPanelSW.Custom.WiXNuGetPanel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges8.2 High- firegiant wix toolset, haxtheweb issues +1 moreWiX is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges8.3 High
- cybozu kunai, cybozu, inc. cybozu kunai for android +1 moreCybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a...7.5 High
- yarnpkg yarn, fedora extra packages for enterprise linux, fedora +2 moreYarn: untrusted search path7.7 High
- gluwa creditcoinBinary Planting Attack on Windows Platforms in Creditcoin3.3 Low
- gitpython-developers gitpythonUntrusted search path under some conditions on Windows allows arbitrary code execution7.8 High
- microsoft printer metadata troubleshooter toolMicrosoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability7.8 High
- dell supportassist for home pcs, supportassist client consumer +1 moreDell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation...7.3 High
- zoom, zoom meeting software development kit, video software development kit +2 more +4 morePath traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for...7.3 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +20 more +22 moreXAML Diagnostics Elevation of Privilege Vulnerability6.7 Medium
- apache hadoopPrivilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems7.5 High
- zoom rooms, zoom video communications, inc. rooms client for windows and zoom vdi client, zoom virtual desktop infrastructure +2 moreUntrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged...3.1 Low
- fortinet forticlient, forticlientwindows +1 moreA untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to...7.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +30 more +32 moreWindows User Interface Application Core Remote Code Execution Vulnerability7.8 High
- microsoft windows defender, windows defender antimalware platform +1 moreMicrosoft Windows Defender Elevation of Privilege Vulnerability7.8 High
- zscaler client connectorPrivilege Escalation for ZCC macOS via PATH Variable7.8 High
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 12 +1 more +3 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.0 High
- microsoft skype for business server 2015 cu13, skype for business server 2019 cu7, skype for business server +2 moreSkype for Business Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +26 more +28 moreWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability7.8 High
- zoom cleanzoomUntrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to...7.2 High
- vim, vim vim/vim, apple macos +2 moreUntrusted Search Path in vim/vim7.8 High
- gitpython-developers gitpythonUntrusted search path on Windows systems leading to arbitrary code execution7.8 High
- python, netapp active iq unified manager +1 moreAn issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed...7.5 High
- intel rst software rst software, intel rapid storage technology +1 moreUncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3...6.7 Medium
- adobe acrobat, acrobat reader, acrobat dc +1 more +3 moreAdobe Acrobat Reader Untrusted Search Path Application denial-of-service4.7 Medium
- zoom rooms, zoom video communications inc rooms for windows +1 moreUntrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated...7.9 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows 11 21h2 +1 more +3 moreTablet Windows User Interface Application Core Remote Code Execution Vulnerability7.8 High
- zoom, zoom video communications, inc. desktop client for windows +1 moreUntrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may...7.3 High
- zoom rooms, zoom video communications inc rooms for windows +1 moreImproper access control in Zoom Rooms before version 5.15.0 may allow an authenticated user to...8.4 High
- zoom rooms, zoom video communications inc rooms for windows +1 moreUntrusted search path in the installer for Zoom Rooms before version 5.15.0 may allow an...8.2 High
- zoom rooms, zoom video communications inc rooms for windows +1 moreInsecure temporary file in the installer for Zoom Rooms before version 5.15.0 may allow an...8.2 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +10 more +12 moreWindows Geolocation Service Remote Code Execution Vulnerability7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service...7.8 High
- trend micro apex one, trend micro, inc. micro apex one +1 moreAn untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service...7.8 High
- mozilla sccacheLocal Privilege Escalation in sccache7.8 High
- softexpert excellence suiteSoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion...9.8 Critical
- kodcloud kodboxkodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.7.5 High
- qualys cloud agentLocal Privilege Escalation6.7 Medium
- wondershare creative centerrAn issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote...7.8 High
- wondershare edraw-maxAn issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to...7.8 High
- wondershare pdf readerAn issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to...7.8 High
- wondershare pdfelementAn issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to...7.8 High
- wondershare dr.foneAn issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to...7.8 High
- wondershare anireelAn issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to...7.8 High
- wondershare recoveritAn issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to...7.8 High
- wondershare repairitAn issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to...7.8 High
- wondershare mobiletransAn issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to...7.8 High
- Show moreLoading…