CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- apple macosA library injection issue was addressed with additional restrictions. This issue is fixed in...5.5 Medium
- acronis cyber protect 16, cyber protect cloud agent +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- acronis cyber protect cloud agentLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.5 Medium
- intel raid web consoleUncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow...6.7 Medium
- mattermost, mattermost desktop +1 moreRCE in desktop app in Windows by local attacker5.3 Medium
- cisco meraki systems manager agent, meraki systems manager +1 moreCisco Meraki Systems Manager Agent for Windows Privilege Escalation Vulnerability7.3 High
- avg internet securityLocal privilege escalation vulnerability in AVG Internet Security7.8 High
- ivanti endpoint managerAn uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September...6.7 Medium
- ivanti workspace controlDLL hijacking in the management console of Ivanti Workspace Control version 10.18.0.0 and below...8.8 High
- byron gitoxidegix-path improperly resolves configuration path reported by Git6.0 Medium
- overwolfLocal privilege escalation in Overwolf7.8 High
- acronis snap deployLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- acronis snap deployLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- vipre advanced securityVIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- scooter software beyond compareScooter Software Beyond Compare 7zxa.dll uncontrolled search path8.5 High
- intel ethernet complete driver packUncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow...5.4 Medium
- intel oneapi compiler softwareUncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may...5.4 Medium
- intel oneapi math kernel libraryUncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version...5.4 Medium
- intel distribution for gdb, distribution for gdb software, oneapi base toolkit +2 moreUncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1...5.4 Medium
- intel field programmable gate array software development kit for openclUncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow...5.4 Medium
- intel graphics performance analyzer, graphics performance analyzers +1 moreUncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an...5.4 Medium
- intel ethernet adapter complete driver packUncontrolled search path element in some installation software for Intel(R) Ethernet Adapter...5.4 Medium
- intel high level synthesis compiler, high level synthesis compiler software, oneapi dpc\+\+\/c\+\+ compiler +1 more +3 moreUncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version...5.4 Medium
- intel ipp cryptography, integrated performance primitives cryptography, oneapi base toolkit +2 moreUncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may...5.4 Medium
- intel mpi library, oneapi hpc toolkit +1 moreUncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow...5.4 Medium
- intel simics package managerUncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3...5.4 Medium
- intel trace analyzer and collector, oneapi hpc toolkit +1 moreUncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version...5.4 Medium
- intel oneapi base toolkit, vtune profiler +1 moreUncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may...5.4 Medium
- intel emon softwareUncontrolled search path in some EMON software before version 11.44 may allow an authenticated...5.4 Medium
- intel license manager for flexlm product software, license manager for flexim +1 moreUncontrolled search path for some Intel(R) License Manager for FLEXlm product software before...5.4 Medium
- intel quartus prime, quartus prime pro +1 moreUncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before...5.4 Medium
- intel ipp software, integrated performance primitives, oneapi base toolkit +2 moreUncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an...5.4 Medium
- intel vroc software, virtual raid on cpu +1 moreUncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an...5.4 Medium
- amd uprof, uprof tool, μprof tool +2 moreA DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege...7.3 High
- okta verify for windows, verify +1 moreOkta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The...5.5 Medium
- canonical ltd. wpa supplicantAn issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared...8.8 High
- iobit dualsafe password managerIObit DualSafe Password Manager BPL RTL120.BPL uncontrolled search path8.5 High
- iobit driver boosterIObit Driver Booster BPL VCL120.BPL uncontrolled search path8.5 High
- iobit itop data recovery proIObit iTop Data Recovery Pro BPL madbasic_.bpl uncontrolled search path8.5 High
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...7.3 High
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...7.8 High
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element...7.3 High
- imagemagickArbitrary Code Execution in `AppImage` version `ImageMagick`7.0 High
- mp3tagMp3tag DLL tak_deco_lib.dll uncontrolled search path4.8 Medium
- byron gitoxidegitoxide's gix-path can use a fake program files location6.8 Medium
- gitlabUncontrolled Search Path Element in GitLab3.0 Low
- zoom workplace desktop, zoom communications, inc workplace desktop app for macos +1 moreZoom Workplace Desktop App for macOS - Uncontrolled Search Path Element6.6 Medium
- ibm iIBM i privilege escalation7.0 High
- iconics genesis64, mitsubishi electric corporation genesis32, hyper historian +2 more +4 moreUncontrolled Search Path Element vulnerability in ICONICS GENESIS64 all versions, Mitsubishi...7.0 High
- No product listedAn issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege...7.0 High
- Show moreLoading…