CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- go-vikunja vikunja Vikunja before 2.7.1 Plugin and Log Directories Not Anchored to Rootpath 1.0 Low
- adobe illustrator cc Rejected reason: Reserved ID never published and not linked to any VULN ticket - quota reclaim... 7.8 High
- mistralai mistral-vibe Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe 8.6 High
- apache openoffice Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer 7.8 High
- anthropics claude-code Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable 7.5 High
- solarwinds dameware SolarWinds Dameware DLL Hijacking Vulnerability 8.2 High
- pgadmin 4, pgadmin.org pgadmin 4 +1 more pgAdmin 4: Utility binary path can point at a shared storage directory 7.7 High
- yamaha corporation lan monitor for windows The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely... 8.4 High
- gnupg CVE-2026-118131 9.8 Critical
- adobe creative cloud desktop application Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427) 7.3 High
- No product listed An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to... 7.8 High
- hp inc. one agent software, hp, inc. hp one agent software +1 more HP One Agent Software – Security Update 8.5 High
- luxion keyshot Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability 7.8 High
- asus armoury crate, armoury crate se +1 more An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to... 8.5 High
- dell application store Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element... 7.8 High
- siemens software center A vulnerability has been identified in Siemens Software Center (All versions). The affected... 8.4 High
- metalama Metalama: Local code execution via DLL planting in world-writable temporary directories (Linux/macOS) 8.2 High
- hestiacp HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking 9.9 Critical
- adobe dimension Dimension | Uncontrolled Search Path Element (CWE-427) 8.6 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +7 more +9 more Windows AI Elevation of Privilege Vulnerability 7.8 High
- imagemagick ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate 7.3 High
- glavsoft tightvnc DLL search order hijacking via screenhooks libraries in TightVNC Server 7.8 High
- google chrome Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to... 8.6 High
- mitel mivoice office 400 Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution 8.4 High
- nvidia geforce, guest driver, rtx, quadro, nvs +1 more +3 more NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an... 7.8 High
- rapid7 insight agent Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation 7.8 High
- ibm concert Multiple Vulnerabilities in IBM Concert Software 7.8 High
- foxit pdf editor, pdf reader +1 more Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking 8.8 High
- netdata Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair 7.8 High
- qualcomm software center, qualcomm, inc. snapdragon +1 more Uncontrolled Search Path Element in Qualcomm Software Center 8.8 High
- netbox-community devicetype-library NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft 8.8 High
- dell driver pack for linux os, driver pack for windows os, server update utility, linux 64-bit format +1 more +3 more Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path... 8.2 High
- geovision inc. gv-remote e-map GeoVision GV-Remote E-Map dll hijacking vulnerability 7.8 High
- pdfforge pdf architect pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 7.8 High
- rakuten kobo inc. the installer for rakuten kobo desktop application (windows version) The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic... 8.4 High
- gitpython-developers gitpython GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation 8.7 High
- google chrome Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to... 8.1 High
- adobe photoshop, photoshop 2025, photoshop 2026 +2 more Photoshop Desktop | Uncontrolled Search Path Element (CWE-427) 8.6 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Hello Security Feature Bypass Vulnerability 4.4 Medium
- knowns-dev knowns knowns before 0.30.0 Arbitrary Code Execution via LSP Binary 8.5 High
- invicti security corp. acunetix Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe 8.5 High
- easybyte software konga Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path 8.5 High
- openai codex desktop, codex desktop (microsoft store package) +1 more OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because... 7.3 High
- siyuan-note siyuan SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path 7.0 High
- nvidia openshell NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox... 9.9 Critical
- nltk NLTK before 3.10.3 Arbitrary Code Execution via Graphviz dot Binary 8.5 High
- microsoft remote help, windows remote help +1 more Microsoft Remote Help Denial of Service Vulnerability 5.5 Medium
- microsoft remote help, windows remote help +1 more Windows Remote Help Defense Spoofing Vulnerability 7.1 High
- zabbix Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading. 5.4 Medium
- dell objectscale Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element... 7.3 High
- Show olderLoading…