CWE-426: Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
Also known as Untrusted Path.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- unity editor, unity3d unity editor +1 moreUnity Editor 2019.1 through 6000.3 could allow remote attackers to exploit file loading and Local...7.4 High
- seagate toolkitIn Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2...7.0 High
- mechrevo control center gx v2Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path7.3 High
- mechrevo control center gx v2Mechrevo Control Center GX V2 reg File uncontrolled search path7.3 High
- zoom communications inc clients for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Clients for Windows - Untrusted Search Path9.6 Critical
- zoom communications inc clients for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Clients for Windows- Race Condition6.2 Medium
- autodesk 3ds max, autocad, autocad lt +7 more +9 morePrivilege Ecalation due to Untrusted Search Path Vulnerability7.8 High
- nvidia container toolkitNVIDIA Container Toolkit for all platforms contains an Untrusted Search Path9.0 Critical
- palo alto networks globalprotect app, globalprotect uwp app +1 moreGlobalProtect App: Privilege Escalation (PE) Vulnerability8.4 High
- apache tomcatApache Tomcat: exe side-loading via icalcs.exe in Tomcat installer for Windows8.4 High
- autodesk installerPrivilege Ecalation due to Untrusted Search Path Vulnerability7.8 High
- microsoft .net, .net 8.0, .net 9.0 +8 more +10 more.NET and Visual Studio Remote Code Execution Vulnerability7.5 High
- yandex telemostDLL Hijacking in Yandex Telemost8.4 High
- lenovo pc manager, pcmanager +1 moreAn untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local...8.5 High
- perlPerl threads have a working directory race condition where file operations may target unintended paths5.9 Medium
- wondershare filmoraWondershare Filmora Installer NFWCHK.exe uncontrolled search path7.3 High
- sangfor atrust, 零信任访问控制系统 atrust +1 moreSangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path7.3 High
- broadcom automic automationBroadcom Automic Automation Agent Unix privilege escalation8.5 High
- gnu glibcUntrusted LD_LIBRARY_PATH environment variable vulnerability in the GNU C Library version 2.27 to...7.8 High
- cbewin anytxt searcherCBEWIN Anytxt Searcher ATService.exe uncontrolled search path7.3 High
- lodop c-lodopMTSoftware C-Lodop CLodopPrintService unquoted search path7.3 High
- hainan todeskHainan ToDesk DLL File Parser profapi.dll uncontrolled search path7.3 High
- shanghai bairui information technology sunloginclientShanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path7.3 High
- discordDiscord WINSTA.dll uncontrolled search path7.3 High
- patch my pc home updaterPatch My PC Home Updater System.IO uncontrolled search path7.3 High
- mechrevo control consoleMechrevo Control Console GCUService csCAPI.dll uncontrolled search path7.3 High
- samba pppThe passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.9.3 Critical
- microsoft system center data protection manager 2019, system center data protection manager 2022, system center data protection manager 2025 +17 more +19 moreMicrosoft System Center Elevation of Privilege Vulnerability7.8 High
- aiven aiven-extrasaiven-extras allows PostgreSQL Privilege Escalation through format function9.1 Critical
- acronis cyber protect cloud agentLocal privilege escalation due to a binary hijacking vulnerability. The following products are...6.3 Medium
- mattermost, mattermost desktop +1 moremacOS TCC Bypass via Code Injection3.3 Low
- jetbrains runtimeIn JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure...5.2 Medium
- adobe illustratorIllustrator | Untrusted Search Path (CWE-426)7.8 High
- blizzard battle.netBlizzard Battle.Net profapi.dll uncontrolled search path7.3 High
- mongodb mongosh, redhat codeready linux builder eus, codeready linux builder for arm64 eus +10 more +12 moreMongoDB Shell may be susceptible to local privilege escalation in Windows7.5 High
- mongodb compass, redhat enterprise linux for arm 64, enterprise linux for ibm z systems +2 more +4 moreMongoDB Compass may be susceptible to local privilege escalation in Windows7.5 High
- esri arcgis allsource, arcgis pro +1 moreThere is a code injection vulnerability in Esri ArcGIS AllSource7.3 High
- pbatard rufusLocal Privilege Escalation in Rufus 4.6 and previous versions6.8 Medium
- kong insomniaKong Insomnia profapi.dll untrusted search path7.3 High
- python software foundation cpythonDefault mimetype known files writeable on Windows2.3 Low
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.3 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.3 Medium
- zoom communications, inc workplace apps for windows, zoom meeting software development kit, rooms +4 more +6 moreZoom Workplace Apps for Windows - Untrusted Search Path4.6 Medium
- snowflake jdbc, snowflakedb snowflake-jdbc +1 moreSnowflake JDBC allows an untrusted search path on Windows7.8 High
- No product listedPostman profapi.dll untrusted search path2.0 Low
- No product listedDiscord profapi.dll untrusted search path2.0 Low
- rise group mode temp cpuRise Group Rise Mode Temp CPU Startup CRYPTBASE.dll untrusted search path8.5 High
- obsproject obs studioobsproject OBS Studio untrusted search path2.0 Low
- Show moreLoading…