CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- intel one boot flash updateUncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an...6.7 Medium
- intel hid event filter driver, intel nuc 12 pro kits and mini pcs nuc12ws intel hid event filter driver installation software nuc 12 pro kits and mini pcs nuc12ws intel hid event filter driver installation software +1 moreUncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event...6.7 Medium
- intel thunderbolt 3 controller firmware, intel nuc kit nuc6i7kyk thunderbolt 3 frimware update tool installation software nuc kit nuc6i7kyk thunderbolt 3 frimware update tool installation software +1 moreUncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update...6.7 Medium
- intel extreme tuning utilityUncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow...6.7 Medium
- lenovo system updateAn uncontrolled search path vulnerability was reported in Lenovo System Update that could allow...7.8 High
- bleachbitDLL Search Order Hijacking vulnerability in BleachBit for Windows7.3 High
- ge micom s1 agileUncontrolled Search Path Element in GE MiCOM S1 Agile5.3 Medium
- nvidia gpu display driver, gpu display driver, vgpu driver, and cloud gaming driver, virtual gpu +2 moreCVE8.2 High
- nvidia gpu display driver, gpu display driver, vgpu driver, and cloud gaming driver, virtual gpu +2 moreCVE7.3 High
- sonicwall netextenderSonicWall NetExtender Windows (32-bit and 64-bit) client 10.2.336 and earlier versions have a DLL...7.3 High
- synaptics displaylink, displaylink usb graphics software for windows +1 moreSynaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading5.5 Medium
- xinje xdpproXINJE XDPPro cfgmgr32.dll uncontrolled search path7.8 High
- acronis cyber protect 16, cyber protect cloud agent, agent +2 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.6 Medium
- ibm storage protect for virtual environments, storage protect, storage protect client +2 moreIBM Spectrum Protect code execution8.4 High
- caphyon advanced installerCaphyon Advanced Installer WinSxS DLL uncontrolled search path7.8 High
- samsung memory card \& ufd authenticationA DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software...7.3 High
- forescout nac secureconnector, secureconnector +1 moreForeScout NAC SecureConnector – CWE-427: Uncontrolled Search Path Element7.8 High
- splunk, splunk enterprise +1 moreSplunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL7.0 High
- tenable nessusArbitrary File Write6.8 Medium
- mcafee safe connectMcAfee Safe Connect before 2.16.1.126 may allow an adversary with system privileges to achieve...7.2 High
- lenovo universal device client (udc), universal device client +1 moreAn uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC...7.8 High
- hp inc. and samsung printer software, hp 1vr14a firmware, 209u7a firmware +1,021 more +1,023 moreCertain HP and Samsung Printer software packages may potentially be vulnerable to elevation of...7.3 High
- intel platform service record software development kitUncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an...6.7 Medium
- intel integrated bmc video driver, intel server board m10jnp2sb integrated bmc video drivers server board m10jnp2sb integrated bmc video drive +1 moreUncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video...6.7 Medium
- intel oneapi toolkit and component software installer, advisor for oneapi, cpu runtime for opencl applications +26 more +28 moreUncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before...6.7 Medium
- intel ai hackathonUncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an...8.8 High
- intel oneapi math kernel libraryUncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an...6.7 Medium
- intel openvinoUncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022...6.7 Medium
- intel vcust toolUncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February...6.7 Medium
- intel server firmware update utilityUnquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt)...6.7 Medium
- intel ite tech consumer infrared driver, ite tech consumer infared drivers for intel nuc tech consumer infared drivers for intel nuc +1 moreUncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2...6.7 Medium
- intel uniteUncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version...4.2 Medium
- intel quartus primeUncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition...6.7 Medium
- intel rst software rst software, intel rapid storage technology +1 moreUncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3...6.7 Medium
- outsystems service studioA DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build...7.8 High
- siemens software centerA vulnerability has been identified in Siemens Software Center (All versions < V3.0). A DLL...7.8 High
- sap businessobjects business intelligence, sap se businessobjects business intelligence (installer) +1 moreBinary hijack in SAP BusinessObjects Business Intelligence (Installer)7.6 High
- dieboldnixdorf vynamic viewAn issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to...7.8 High
- codesys development systemCODESYS: Vulnerability in CODESYS Development System allows for execution of binaries7.3 High
- arm development studio, ds development studio, arm ltd compiler 5 (ac5), arm compiler for embedded 6 (ac6), fast models (fm), arm compiler for embedded fusa (acef), arm development studio (ads), arm forge (af), arm mobile studio (ams), ds-5 development studio, fast models (fm), gnu toolchain (gt), keil mdk (kmdk), mbed studio (ms) +2 moreIncomplete verification of installation file signature7.8 High
- keysight geolocation server, keysight technologies n6845a geolocation server +1 moreKeysight Geolocation Server Exposed Dangerous Method or Function7.8 High
- watchguard panda security vpnA DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows...6.5 Medium
- pipreqs project pipreqspipreqs vulnerable to Dependency Confusion9.8 Critical
- trend micro inc micro security, trend micro, inc. micro security (consumer), trendmicro antivirus\+ security 2021 +11 more +13 moreTrend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking...7.8 High
- tenable nessus, security center, tenable.io +2 moreTenable Plugin Feed ID #202306261202 Fixes Privilege Escalation Vulnerability6.3 Medium
- autodesk installerA maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk...7.8 High
- synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 moreUncontrolled search path element vulnerability in Backup Management Functionality in Synology...6.5 Medium
- trellix agentA heap-based overflow vulnerability in TA prior to version 5.7.9 allows a remote user to alter...6.3 Medium
- captura project capturaCaptura CRYPTBASE.dll uncontrolled search path7.0 High
- dell powerpath, powerpath windows +1 morePowerPath for Windows, versions 7.0, 7.1 & 7.2 contains DLL Hijacking Vulnerabilities. A regular...6.7 Medium
- Show moreLoading…