CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- nomachineNoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- panda security dome, pandasecurity panda dome +1 morePanda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability7.8 High
- famatech advanced ip scannerFamatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.3 High
- needrestartQualys discovered that needrestart, before version 3.8, allows local attackers to execute...7.8 High
- needrestartQualys discovered that needrestart, before version 3.8, allows local attackers to execute...7.8 High
- mcafee total protectionMcAfee Trial Installer 16.0.53 has Incorrect Access Control that leads to Local Escalation of...6.7 Medium
- intel oneapi dpc\+\+\/c\+\+ compilerUncontrolled search path in some Intel(R) oneAPI DPC++/C++ Compiler before version 2024.2 may...5.4 Medium
- intel quartus prime, quartus prime pro +1 moreUncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows...5.4 Medium
- intel quartus prime, quartus prime standard edition design software +1 moreUncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows...5.4 Medium
- intel graphics driverUncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45...5.4 Medium
- intel oneapi base toolkit, system bring-up toolkit, vtune profiler +2 moreUncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024...5.4 Medium
- intel server board s2600st firmwareUncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update...5.4 Medium
- intel sdp software, server debug and provisioning tool +1 moreUncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an...5.4 Medium
- intel acat softwareUncontrolled search path for some ACAT software maintained by Intel(R) for Windows before version...5.4 Medium
- intel fortran compilerUncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021...5.4 Medium
- intel proset\/wireless wifiUncontrolled search path element in some Intel(R) PROSet/Wireless WiFi software for Windows...5.4 Medium
- intel graphics offline compiler for opencl code softwareUncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software...5.4 Medium
- intel mas softwareUncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an...5.4 Medium
- intel oneapi math kernel libraryUncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before...5.4 Medium
- intel high level synthesis compiler softwareUncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R)...5.4 Medium
- intel rendering toolkit softwareUncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may...5.4 Medium
- intel ipp software, integrated performance primitives, oneapi base toolkit +2 moreUncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may...5.4 Medium
- intel binary configuration tool software for windows binary configuration tool software for windowsUncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before...5.4 Medium
- hewlett packard enterprise sound research secomn64 driver, sound research secomn64 driver +1 moreSound Research SECOMN64 Escalation of Privilege8.8 High
- hewlett packard enterprise sound research secomn64 driver, sound research secomn64 driver +1 moreSound Research SECOMN64 Escalation of Privilege6.0 Medium
- siemens solid edge se2024A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The...7.0 High
- google safearchivePath Traversal in Safearchive5.9 Medium
- naver whale browser installerWhale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user...6.3 Medium
- helakuruAn issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code...7.8 High
- vso convertxtodvdVSO ConvertXtoDvd ConvertXtoDvd.exe uncontrolled search path8.5 High
- flashfxpOpenSight Software FlashFXP FlashFXP.exe uncontrolled search path8.5 High
- acronis cyber filesLocal privilege escalation due to DLL hijacking vulnerability. The following products are...7.3 High
- acronis cyber filesLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.7 Medium
- solarwinds platformSolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- hcl software bigfix platformHCL BigFix Platform is affected by a DLL Hijack vulnerability2.5 Low
- lenovo service frameworkA DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local...7.8 High
- lenovo pc manager ai intelligent scenario, pcmanager +1 moreA DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could...7.8 High
- lenovo personal cloudA DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local...7.8 High
- lenovo baiyingA DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to...7.8 High
- lenovo leyunA DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to...7.8 High
- lenovo starstudioA DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to...7.8 High
- lenovo lock screenA DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker...7.8 High
- lenovo emulatorA DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to...7.8 High
- lenovo app storeA DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to...7.8 High
- lenovo superfileA DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to...7.8 High
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions <...5.4 Medium
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions <...5.4 Medium
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions <...5.4 Medium
- diebold nixdorf vynamic view prior to v5.9.5, dieboldnixdorf vynamic view +1 moreDiebold Nixdorf – CWE-427: Uncontrolled Search Path Element7.3 High
- microsoft windows 10, windows 11, windows server 2016 +2 more +4 moreMedium to High Integrity Privilege Escalation in Microsoft Windows8.4 High
- Show moreLoading…