CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- openvpn, openvpn openvpn-gui +1 moreOpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable...7.8 High
- adobe after effectsAdobe After Effects uncontrolled search path element vulnerability could lead to remote code execution8.3 High
- vmware app volumes, remote console, tools +2 moreVMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior...7.8 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability7.0 High
- teamviewerTeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations.7.8 High
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreDLL preload vulnerability in McAfee Agent for Windows7.3 High
- f5 big-ip access policy manager, edge client for windows +1 moreOn version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists...7.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation7.8 High
- intel rapid storage technologyUncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology...7.8 High
- intel driver \& support assistantUncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an...7.3 High
- intel lapbc510 firmware, lapbc710 firmware +1 moreUncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated...7.8 High
- intel uniteUncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may...7.3 High
- intel processor diagnostic toolUncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5...7.3 High
- cisco webex teams, webex meetings desktop, webex meetings server +2 more +4 moreCisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability4.8 Medium
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 9.7, 10.1, 10.5, 11.1, and 11.5...7.4 High
- overwolf, overwolf ltd. the installer of overwolf +1 moreUntrusted search path vulnerability in The Installer of Overwolf 2.168.0.n and earlier allows an...7.8 High
- fujitsu scansnap manager, fujitsu limited and pfu limited the installers of scansnap manager and the software download installer +1 moreUntrusted search path vulnerability in the installers of ScanSnap Manager prior to versions V7...7.8 High
- bitdefender gravityzone business securityPrivilege escalation in Bitdefender GravityZone Business Security7.8 High
- ui unifi videoIn Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in...7.8 High
- teradici pcoip graphics agentTeradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker...7.8 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities7.0 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities7.0 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities7.0 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities7.0 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities7.0 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities7.0 High
- honor pcmanagerA DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252,...7.8 High
- siemens logo! soft comfort, logo\! soft comfort +1 moreA vulnerability has been identified in LOGO! Soft Comfort (All versions). The software insecurely...8.4 High
- mozilla thunderbirdWhen loading the shared library that provides the OTR protocol implementation, Thunderbird will...7.8 High
- adobe robohelpPrivilege Escalation Vulnerability in Adobe RoboHelp6.5 Medium
- adobe genuine service, gocart +1 moreAdobe Genuine Service privilege escalation vulnerability6.5 Medium
- adobe genuine service, gocart +1 moreUncontrolled Search Path Element in AGSService.exe6.5 Medium
- forescout counteractAn issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation...7.8 High
- trend micro password manager, trend micro, inc. micro password manager +1 moreTrend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability...7.8 High
- dell peripheral managerDell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation...7.8 High
- cisco advanced malware protection for endpoints, clamav, immunet +1 more +3 moreCisco Advanced Malware Protection for Endpoints Windows Connector, ClamAV for Windows, and Immunet DLL Hijacking Vulnerability7.0 High
- gitlab gitlab-vscode-extensionClient side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to...8.6 High
- bosch video streaming gatewayUncontrolled Search Path Element in Bosch Video Streaming Gateway Installer7.8 High
- bosch monitor wallUncontrolled Search Path Element in Bosch Monitor Wall Installer7.8 High
- bosch configuration managerUncontrolled Search Path Element in Bosch Configuration Manager Installer7.8 High
- bosch video clientUncontrolled Search Path Element in Bosch Video Client installer7.8 High
- bosch video recording managerUncontrolled Search Path Element in Bosch Video Recording Manager Installer7.8 High
- bosch bvms, bvms viewer, divar ip 7000 r2 +4 more +6 moreUncontrolled Search Path Element in Bosch BVMS and BVMS Viewer7.8 High
- bosch ip helperUncontrolled Search Path Element in Bosch IP Helper7.8 High
- tibco enterprise message service, tibco software inc. enterprise message service - community edition, enterprise message service - developer edition +2 moreTIBCO Enterprise Message Service Windows Platform Artifact Search vulnerability8.8 High
- tibco ftl, tibco software inc. ftl - community edition, ftl - developer edition +1 more +3 moreTIBCO FTL Windows Platform Artifact Search vulnerability8.8 High
- git-bug project git-bugArbitrary code execution due to an uncontrolled search path for the git binary9.8 Critical
- c\/c\+\+ advanced lint project advanced lintThe unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers...7.8 High
- bit project bitIn Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a...7.8 High
- zohocorp manageengine desktop centralThe MPS Agent in Zoho ManageEngine Desktop Central MSP build MSP build 10.0.486 is vulnerable to...7.8 High
- Show moreLoading…