CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- dell geodriveDell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low...7.0 High
- notepad-plus-plus, notepad-plus-plus notepad\+\+ +1 morenotepad-plus-plus - DLL Hijacking7.8 High
- jetbrains intellij ideaThe installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order...7.5 High
- honeywell softmasterHoneywell SoftMaster Uncontrolled Search Path Element8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening a Windows shortcut from the local filesystem, an attacker could supply a remote path...5.5 Medium
- crestron airmediaA vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in...7.8 High
- genymobile genymotion desktopGenymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows...7.8 High
- samsung smart switch pcDLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to...6.2 Medium
- outbyte pc repairOutbyte PC Repair Installation File 1.7.112.7856 is vulnerable to Dll Hijacking. iertutil.dll is...7.8 High
- automationdirect c-more ea9, c-more ea9-pgmsw firmware, c-more ea9-rhmi firmware +10 more +12 moreAutomationDirect C-more EA9 HMI Uncontrolled Search Path Element7.8 High
- philips version, intel single event api +1 moreUncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow...7.8 High
- intel distribution for pythonUncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may...7.8 High
- intel datacenter group event, philips version +1 moreUncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all...7.8 High
- philips version, intel enpirion digital power configurator gui +1 moreUncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI...7.8 High
- intel vtune profilerUncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022...7.8 High
- softing secure integration server, edgeaggregator, edgeconnector +3 more +5 moreSofting Secure Integration Server Uncontrolled Search Path Element7.2 High
- adobe premiere elementsAdobe Premiere Elements Uncontrolled Search Path Element Privilege Escalation7.8 High
- samsung update, samsung mobile update setup +1 moreDLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to...4.5 Medium
- aveva platform common services (pcs) portal, platform common services, batch management +5 more +7 moreAVEVA PCS Portal Uncontrolled Search Path Element7.3 High
- mcafee agent, trellix agent (ta) +1 moreDLL high jacking in Trellix Agent8.2 High
- scootersoftware beyond compareA DLL hijacking vulnerability exists in the uninstaller in Scooter Beyond Compare 1.8a through 4...7.8 High
- dell powerstore, powerstore command line interface +1 moreDell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI....5.5 Medium
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- showmypcShowMyPC 3606 on Windows suffers from a DLL hijack vulnerability. If an attacker overwrites the...7.3 High
- sage 300In Sage 300 ERP (formerly accpac) through 6.8.x, the installer configures the C:\Sage\Sage300...7.8 High
- nodejs node, node.js +1 moreNode.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows...7.3 High
- nodejs node, node.js, siemens sinec ins +2 moreA cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0...5.3 Medium
- git, apple xcode, debian linux +1 more +3 moreBypass of safe.directory protections in Git7.8 High
- sparklabs viscosityViscosity DLL untrusted search path8.8 High
- orwell-dev-cpp project orwell-dev-cppA binary hijack in Orwell-Dev-Cpp v5.11 allows attackers to execute arbitrary code via a crafted ...7.8 High
- embarcadero dev-c\+\+A binary hijack in Embarcadero Dev-CPP v6.3 allows attackers to execute arbitrary code via a...7.8 High
- netsarang xlpdXLPD v7.0.0094 and below contains an unquoted service path vulnerability which allows local users...7.8 High
- mcafee consumer product removal tool, mcafee,llc mcafee consumer product removal tool +1 moreMcAfee MCPR privilege escalation7.9 High
- pythonPython pgAdmin4 uncontrolled search path5.0 Medium
- zoom meetings, rooms, zoom video communications inc client for meetings +1 more +3 moreDLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients7.1 High
- naver cloud explorer, cloud explorer beta +1 moreNaver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via...7.8 High
- dell supportassist consumer, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist Client Consumer versions (3.11.0 and versions prior) and Dell SupportAssist...7.8 High
- apache friends xamppXAMPP Installer uncontrolled search path6.3 Medium
- samsung kiesDLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows...6.2 Medium
- trend micro apex oneAn uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a...7.8 High
- trend micro password manager, trend micro, inc. micro password manager +1 moreEOL Product CVE - Installer of Trend Micro Password Manager (Consumer) versions 3.7.0.1223 and...7.8 High
- zohocorp manageengine applications managerManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL...7.2 High
- quickheal total securityDLL Hijacking Vulnerability in Quick Heal Total Security7.9 High
- avast premium securityMultiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast...6.5 Medium
- acronis snap deployLocal privilege escalation due to insecure folder permissions7.8 High
- acronis snap deployLocal privilege escalation due to a DLL hijacking vulnerability7.8 High
- intel extreme tuning utilityUncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an...7.3 High
- adobe acrobat, acrobat reader, acrobat reader dc +1 more +3 moreAdobe Acrobat Uninstaller Hard Link Leads To Remote Code Execution6.7 Medium
- Show moreLoading…