CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- sonicwall global vpn clientSonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search...7.8 High
- kaseya unitrends backupAn issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows...7.8 High
- fortinet forticlient, forticlient enterprise management server, forticlientwindows, forticlientems +2 moreAn unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x...7.8 High
- acronis agent, cyber protect 15, cyber protect home office +1 more +3 moreDLL hijacking could lead to denial of service5.5 Medium
- acronis cyber protect 15, cyber protect +1 moreDLL hijacking could lead to local privilege escalation7.8 High
- intel 7265 firmware, ac1550 firmware, ac 3165 firmware +12 more +14 moreUncontrolled search path in software installer for Intel(R) PROSet/Wireless WiFi in Windows 10...7.8 High
- mcafee drive encryption, mcafee,llc mcafee drive encryption (mde) +1 moreMDE DLL Search Order Hijacking vulnerability7.8 High
- delta electronics dialinkDelta Electronics DIALink7.8 High
- delta electronics dialinkDelta Electronics DIALink7.8 High
- antillesAntilles Dependency Confusion Vulnerability8.8 High
- vmware installbuilderUnder certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg...7.8 High
- checkpoint harmony browse, sandblast agent for browsers +1 moreThe Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to...7.8 High
- auvesy versiondogAUVESY Versiondog9.1 Critical
- trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro apex oneAn uncontrolled search path element vulnerabilities in Trend Micro Apex One and Apex One as a...7.8 High
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Reader DC Windows Installer Uncontrolled Search Path element could lead to Arbitrary Code Execution7.3 High
- trend micro housecall for home networks, trend micro, inc. micro housecall for home networks +1 moreAn uncontrolled search path element privilege escalation vulnerability in Trend Micro HouseCall...7.0 High
- asus armoury crate lite serviceASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a...7.3 High
- drweb security spaceDr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL...7.8 High
- pandasecurity panda adaptive defense 360, panda devices agent +1 moreDLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U. Panda Adaptive Defense 360 <= 8...7.8 High
- mcafee agent, mcafee,llc mcafee agent for windows +1 moreImproper privilege management in repair process of MA for Windows8.2 High
- line corporation for windows, linecorp line +1 moreLINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.7.8 High
- adobe creative cloud, creative cloud (desktop component) +1 moreAdobe Creative Cloud Desktop uncontrolled search path element vulnerability could lead to local privilege escalation7.3 High
- schneider-electric gp-pro exA CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior...7.8 High
- sony audio usb driver, hap music transfer, sony corporation the installers of multiple sony products +2 moreUntrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and...7.8 High
- adobe creative cloud desktop application, prelude +1 moreCreative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code execution7.8 High
- adobe acrobat reader, acrobat reader dc, acrobat dc +2 moreAdobe Acrobat Reader Unquoted Search Path Vulnerability7.3 High
- adobe dimensionAdobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code Execution7.8 High
- nextcloud desktop, kiteworks security-advisories +1 moreUntrusted Search Path in Nextcloud Desktop Client7.3 High
- lenovo driver management, drivers management +1 moreA DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719...7.3 High
- acronis cyber protectAcronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to...7.8 High
- foxitsoftware foxit reader, phantompdf +1 moreAn issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows DLL hijacking,...7.8 High
- intel avermedia capture cardUncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers...7.8 High
- fedoraproject fedora, p5-encode project p5-encode +1 moreEncode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a...7.8 High
- acronis true imageAcronis True Image prior to 2021 Update 4 for Windows allowed local privilege escalation due to...7.8 High
- cisco packet tracerCisco Packet Tracer for Windows DLL Injection Vulnerability7.3 High
- 1passwordA DLL injection vulnerability in 1password.dll of 1Password 7.3.712 allows attackers to execute...7.8 High
- ibm i2 ibaseIBM i2 iBase 8.9.13 could allow a local authenticated attacker to execute arbitrary code on the...7.7 High
- dell supportassist for business pcs, supportassist for home pcs, supportassist client +2 moreDell SupportAssist for Business PCs versions 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3 and Dell...7.8 High
- nvidia gpu display driverNVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an...7.8 High
- honor pcmanagerA DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102,...7.8 High
- zscaler client connectorThe Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability...7.8 High
- palo alto networks cortex xdr agentCortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation7.8 High
- bat project batUncontrolled Search Path Element in sharkdp/bat7.8 High
- raonwiz raon k editorAn issue in RAONWIZ K Editor v2018.0.0.10 allows attackers to perform a DLL hijacking attack when...7.8 High
- vmware thinappVMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure...7.8 High
- stormshield endpoint securityStormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended...6.7 Medium
- delta project deltaRelative Path Traversal in git-delta7.8 High
- openvpn connectOpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable...7.8 High
- Show moreLoading…