CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- plex media serverImproper Input Validation in Plex Media Server on Windows allows a local, unauthenticated...7.8 High
- google earth, earth pro +1 moreDLL Hijacking in Google Earth Pro Windows installer7.8 High
- google androidAn issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, and 8.1 software...9.8 Critical
- lg pc suiteAn issue was discovered in LG PC Suite for LG G3 and earlier (aka LG PC Suite v5.3.27 and earlier...7.8 High
- starface unified communication \& collaboration clientSTARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with...9.8 Critical
- ui unifi videoIn UniFi Video v3.10.1 (for Windows 7/8/10 x64) there is a Local Privileges Escalation to SYSTEM...7.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 moreAdobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017...7.8 High
- asus device activationDevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could...7.8 High
- schneider-electric pmepxm0100 prosoft configuratorA CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator (v1.002...7.8 High
- fortinet forticlient emergency management server, forticlientems +1 moreAn Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow...7.5 High
- fortinet forticlient, forticlient virtual private network, forticlientwindows +2 moreAn Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below...7.1 High
- trend micro password manager for windows, trendmicro password manager +1 moreTrend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability...7.8 High
- intel graphics driver, intel(r) graphics drivers +1 moreUncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an...7.8 High
- intel graphics driver, intel(r) graphics drivers +1 moreUncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions...7.8 High
- dell client consumer and commercial platforms, g3 15 3590 firmware, g3 3579 firmware +111 more +113 moreDell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability....7.1 High
- trend micro vulnerability protectionTrend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an...7.8 High
- trend micro im security (ims), trend micro control manager (tmcm), trend micro officescan (osce), trend micro endpoint sensor (tmes), trend micro security (consumer), trend micro scanmail for microsoft exchange (smex), trend micro serverprotect (sp), trend micro mobile security enterprise (tmms enterprise), trendmicro control manager, endpoint sensor +6 more +8 moreTrend Micro has repackaged installers for several Trend Micro products that were found to utilize...7.0 High
- cisco anyconnect secure, anyconnect secure mobility client +1 moreCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability6.5 Medium
- westerndigital westerndigitalssddashboardsetup.exe, sandiskssddashboardsetup.exe +1 moreWestern Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking.7.8 High
- symantec endpoint protectionSymantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP...7.8 High
- atlassian confluence, confluence data center, confluence server +2 moreThe usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5,...7.8 High
- atlassian jira serverThe usage of Tomcat in Jira before version 8.5.2 allows local attackers with permission to write...7.8 High
- trend micro anti-threat toolkit (attk), trendmicro anti-threat toolkit +1 moreTrend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that...7.8 High
- erdas er viewer, hexagongeospatial erdas er viewer +1 moreERDAS ER Viewer 13.0 has dwmapi.dll and irml.dll libraries arbitrary code execution vulnerabilities7.8 High
- python, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moreIn Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure...5.5 Medium
- schneider-electric msx configuratorA CWE-427:Uncontrolled Search Path Element vulnerability exists in MSX Configurator (Software...7.8 High
- intel intel(r) snmp subagent stand-alone for windows*, snmp subagent stand-alone +1 moreUncontrolled search path element in the installer for Intel(R) SNMP Subagent Stand-Alone for...6.7 Medium
- symantec norton download managerA vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote...7.8 High
- symantec endpoint protection small business edition cloud, and endpoint protection cloud client, endpoint protection, endpoint protection cloud +8 more +10 moreA Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with...7.8 High
- signal signal-desktopSignal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a...7.3 High
- vmware horizon view agent, workstation +1 moreVMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5...7.8 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreTrend Micro HouseCall for Home Networks (versions below 5.3.0.1063) could be exploited via a DLL...7.8 High
- asus atk packageAsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to...7.0 High
- acer quick accessIn the Quick Access Service (QAAdminAgent.exe) in Acer Quick Access V2.01.3000 through 2.01.3027...7.8 High
- mcafee techcheck, mcafee, llc mcafee techcheck +1 moreDLL Search Order Hijacking6.6 Medium
- dell command\|configure, command configure (dcc) +1 moreDell Command Configure versions prior to 4.2.1 contain an uncontrolled search path vulnerability....7.1 High
- sony catalyst browse, catalyst production suite +1 moreIn Sony Catalyst Production Suite through 2019.1 (1.1.0.21) and Catalyst Browse through 2019.1 (1...7.8 High
- copadata zenonCOPA-DATA zenone32 zenon Editor through 8.10 has an Uncontrolled Search Path Element.7.8 High
- dell command update, command update (dcu) +1 moreDell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A...5.6 Medium
- dell command update, command update (dcu) +1 moreDell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A...5.6 Medium
- autodesk desktopDLL preloading vulnerability in Autodesk Desktop Application versions 7.0.16.29 and earlier. An...7.8 High
- cisco webex teams, webex meetings +1 moreCisco Webex Teams for Windows DLL Hijacking Vulnerability5.3 Medium
- comodo internet securityAn issue was discovered in signmgr.dll 6.5.0.819 in Comodo Internet Security through 12.0. A DLL...7.8 High
- symantec endpoint protectionSymantec Endpoint Protection, prior to 14.2 RU2, may be susceptible to an unsigned code execution...6.7 Medium
- adobe illustrator ccAdobe Illustrator CC versions 23.1 and earlier have an insecure library loading (dll hijacking)...7.8 High
- adobe animate ccAdobe Animate CC versions 19.2.1 and earlier have an insecure library loading (dll hijacking)...7.8 High
- nvidia geforce experience, windows gpu display driver, gpu driver +2 moreNVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions)...6.5 Medium
- nvidia geforce experienceNVIDIA GeForce Experience, all versions prior to 3.20.1, contains a vulnerability when GameStream...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in NVIDIA Control Panel...6.5 Medium
- fortinet forticlient, forticlient for windows +1 moreA malicious DLL preload vulnerability in Fortinet FortiClient for Windows 6.2.0 and below allows...7.8 High
- Show moreLoading…