CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- intel mpi libraryUncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R)...6.7 Medium
- intel distribution for pythonUncontrolled search path element in the Intel(R) Distribution for Python programming language...6.7 Medium
- intel oneapi collective communications libraryUncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL...6.7 Medium
- intel oneapi deep neural networkUncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before...6.7 Medium
- intel oneapi data analytics libraryUncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before...6.7 Medium
- intel openmpUncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may...6.7 Medium
- intel trace analyzer and collectorUncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021...6.7 Medium
- intel fpga add-onUncontrolled search path element in the Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit...6.7 Medium
- genymotion desktopGenymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows...7.8 High
- checkmkPrivilege escalation via manipulated unixcat executable8.8 High
- nvidia geforce experienceNVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client...6.8 Medium
- intel oneapi dpc\+\+\/c\+\+ compilerUncontrolled search path in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for...6.7 Medium
- f5 big-ip edge, apm clients, big-ip access policy manager +2 moreBIG-IP Edge Client for Windows vulnerability7.8 High
- f5 big-ip edge, apm clients, big-ip access policy manager +2 moreBIG-IP Edge Client for Windows vulnerability6.5 Medium
- trellix data loss prevention (dlp), data loss prevention +1 moreThe protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0....5.9 Medium
- dell openmanage server administrator (omsa), openmanage server administrator +1 moreDell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection...7.0 High
- razer synapseRazer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation...6.8 Medium
- windscribeThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- cybereason endpoint detection and responseCybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and...7.8 High
- bits-and-blooms bits-and-blooms/bloom, bloom project bloom +1 moreUncontrolled Search Path Element in bits-and-blooms/bloom7.8 High
- shibboleth service provider** DISPUTED ** Insecure folder permissions in the Windows installation path of Shibboleth Service...7.3 High
- zoom rooms, zoom video communications inc rooms for windows +1 moreLocal Privilege Escalation in Zoom Rooms for Windows Installers8.8 High
- echatserver easy chat serverEfs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability...7.8 High
- mozilla firefoxIf Firefox was installed to a world-writable directory, a local privilege escalation could occur...7.0 High
- baidu baidunetdiskUntrusted search path vulnerability in Baidunetdisk Version 7.4.3 and earlier allows an attacker...6.7 Medium
- squirrel installers generated by squirrel.windows, squirrel.windows project squirrel.windows +1 moreSquirrel.Windows is both a toolset and a library that provides installation and update...7.8 High
- autodesk dwg trueviewDWG TrueViewTM 2023 version has a DLL Search Order Hijacking vulnerability. Successful...7.8 High
- google android google search app, search +1 morePath Traversal in Android Google Search App8.9 High
- siemens sicam pas/pqs, sicam pas\/pqs +1 moreA vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software...7.8 High
- trellix agentAn uncontrolled search path vulnerability exists in Trellix Agent (TA) for Windows in versions...6.7 Medium
- mcafee total protectionMcAfee Total Protection prior to version 16.0.49 contains an uncontrolled search path element...7.8 High
- ibm i, i access client solutions +1 moreIBM i Access Family 1.1.2 through 1.1.4 and 1.1.4.3 through 1.1.9.0 could allow a local...7.2 High
- lg smart shareWhen LG SmartShare is installed, local privilege escalation is possible through DLL Hijacking...7.8 High
- hp fusion, support assistant +1 moreHP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses...7.8 High
- installbuilderInstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the...7.3 High
- zoom rooms, zoom video communications inc rooms installer for windows +1 moreLocal Privilege Escalation in Zoom Rooms Installer for Windows8.8 High
- zoom meetings, rooms, zoom video communications inc client for meetings for windows (32-bit) +2 more +4 moreDLL injection in Zoom Windows Clients3.3 Low
- intel vtune profilerUncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may...6.7 Medium
- intel system studioUncontrolled search path in the software installer for Intel(R) System Studio for all versions,...6.7 Medium
- intel nuc kit wireless adapter driver installerUncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter...6.7 Medium
- intel quartus primeUncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before...6.7 Medium
- intel glorpUncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user...6.7 Medium
- intel gametechdev presentmonUncontrolled search path element in the PresentMon software maintained by Intel(R) before version...6.7 Medium
- intel advanced link analyzerUncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2...6.7 Medium
- foxitsoftware foxit readerAn Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569...7.8 High
- nec expresscluster x, nec corporation clusterpro x, nec expresscluster x singleserversafe +2 moreUncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5...9.8 Critical
- acronis cyber protect home officeLocal privilege escalation due to DLL hijacking vulnerability. The following products are...2.2 Low
- redisRedis on Windows dbghelp.dll uncontrolled search path6.3 Medium
- jupyter core, debian linux, fedoraproject fedora +2 moreExecution with Unnecessary Privileges in JupyterApp8.8 High
- sony content transfer, sony corporation content transfer (for windows) +1 moreUntrusted search path vulnerability in the installer of Content Transfer (for Windows) Ver.1.3...7.8 High
- Show moreLoading…