CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- epic games launcherEpic Games Launcher Installer profapi.dll untrusted search path2.0 Low
- microsoft edge update, edge update setup +1 moreMicrosoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability7.4 High
- bitdefender antivirus free 2020, antivirus 2020 +1 moreUntrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)8.8 High
- termiusAn issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a...3.3 Low
- phiewerIn Phiewer 4.1.0, a dylib injection leads to Command Execution which allow attackers to inject...3.3 Low
- No product listedAn issue in the USB Autorun function of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to...8.4 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- ivanti endpoint managerAn unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and...7.2 High
- libretro retroarchlibretro RetroArch Startup profapi.dll untrusted search path4.8 Medium
- pnpmpnpm vulnerable to no-script global cache poisoning via overrides / `ignore-scripts` evasion5.8 Medium
- autodesk revitUntrusted Search Path vulnerability in Autodesk Revit7.8 High
- veeam agent, agent for windows +1 moreDLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes...7.0 High
- clementine-player clementineAn issue in Clementine v.1.3.1 allows a local attacker to execute arbitrary code via a crafted...7.3 High
- adobe substance3d - painter, substance 3d painter +1 moreSubstance3D - Painter | Untrusted Search Path (CWE-426)7.8 High
- fortinet forticlient, forticlientwindows +1 moreA untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2...6.7 Medium
- microsoft sql server 2016 service pack 3 (gdr), sql server 2016 service pack 3 azure connect feature pack, sql server 2017 (cu 31) +9 more +11 moreMicrosoft.SqlServer.XEvent.Configuration.dll Remote Code Execution Vulnerability7.8 High
- ivanti connect secure, policy secure +1 moreExcessive binary privileges in Ivanti Connect Secure which affects versions 22.4R2 through 22.7R2...7.8 High
- autodesk vred, vred design +1 moreAutodesk VRED Design Privilege Escalation Vulnerability7.8 High
- opentext™ application lifecycle management (alm),quality center, opentext alm quality center +1 moreCode injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center.5.3 Medium
- adobe framemakerAdobe Framemaker | Untrusted Search Path (CWE-426)7.8 High
- microsoft office, 365 apps, 365 apps for enterprise +4 more +6 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- hp, inc. hp one agent software, hp inc one agent software +1 moreHP One Agent Software – Potential Privilege Escalation8.0 High
- intelbras incontrol, incontrol web +1 moreIntelbras InControl incontrol-service-watchdog.exe unquoted search path8.5 High
- microsoft windows 10, windows 11, windows server 2016 +2 more +4 moreMedium to High Integrity Privilege Escalation in Microsoft Windows8.4 High
- ivanti workspace control, automation +1 moreDLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below...8.8 High
- sap businessobjects business intelligence platform, business objects business intelligence platform +1 moreDLL hijacking vulnerability in SAP BusinessObjects Business Intelligence Platform5.8 Medium
- lenovo browserDLL Hijacking in Yandex Browser8.4 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreUntrusted search path vulnerability in B&R APROL5.4 Medium
- b&r industrial automation aprol, b and r industrial automotion and r aprol, br-automation industrial automation aprol +2 moreUntrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL7.3 High
- dell supportassist for home pcsDell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation...7.3 High
- scooter software beyond compareScooter Software Beyond Compare 7zxa.dll uncontrolled search path8.5 High
- zoom workplace desktop, zoom communications inc. workplace desktop app for macos and zoom meeting sdk for macos, zoom meeting software development kit +2 moreZoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path6.5 Medium
- adobe dimensionAdobe Dimension Untrusted Search Path lead to load malicious DLL swift.dll7.8 High
- cato networks sdp client, catonetworks cato client +1 moreCato Networks Windows SDP Client Local Privilege Escalation via openssl configuration file8.8 High
- cato networks sdp client, catonetworks cato client +1 moreCato Networks Windows SDP Client Local Privilege Escalation via self-upgrade8.8 High
- adobe premiere proAdobe Premiere Pro arbitrary DLL loading lead to remote code execution7.0 High
- microsoft power platformMicrosoft Dataverse Remote Code Execution Vulnerability8.0 High
- samsung magicianSamsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the...6.3 Medium
- intelbras incontrolIntelbras InControl incontrolWebcam Service unquoted search path8.5 High
- irodsiRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail...9.8 Critical
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +1 more +3 moreMicrosoft SharePoint Server Remote Code Execution Vulnerability7.8 High
- apiris kafeoAn issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arbitrary code every time the product is executed.7.3 High
- phoenix contact charx sec-3000, charx sec-3050, charx sec-3100 +9 more +11 morePHOENIX CONTACT: Privilege escalation in CHARX Series7.8 High
- netdatandsudo: local privilege escalation via untrusted search path8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +21 more +23 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- adobe lightroom, lightroom desktop +1 moreLightroom Desktop | Untrusted Search Path (CWE-426)7.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +2 more +4 moreWindows OLE Remote Code Execution Vulnerability8.8 High
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 13 +1 more +3 moreMicrosoft Exchange Server Remote Code Execution Vulnerability8.8 High
- cdac appsamvid softwareDynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software6.3 Medium
- Show moreLoading…