CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- wondershare filmoraWondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.7.8 High
- blizzard battle.netBlizzard Battle.Net profapi.dll uncontrolled search path7.3 High
- ibm iIBM i privilege escalation8.5 High
- trend micro, inc. micro housecall for home networks, trendmicro housecall for home networks +1 moreTrend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled...7.3 High
- citrix secure access client for mac, secure access client +1 moreAn attacker can gain application privileges in order to perform limited modification and/or read arbitrary data5.8 Medium
- pbatard rufusLocal Privilege Escalation in Rufus 4.6 and previous versions6.8 Medium
- hitachi hvac energy saving programInsecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program7.3 High
- hitachi usb-convertercable driverInsecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER7.3 High
- No product listedUncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Quartus(R) Prime Software before version 23.1.1 Patch...5.4 Medium
- No product listedUncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0...5.4 Medium
- No product listedUncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP)...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version...5.4 Medium
- No product listedUncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may...5.4 Medium
- No product listedUncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Chipset Software Installation Utility before version...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021...5.4 Medium
- intel advisor, oneapi base toolkit +1 moreUncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an...5.4 Medium
- No product listedUncontrolled search path for some EPCT software before version 1.42.8.0 may allow an...5.4 Medium
- No product listedUncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R)...5.4 Medium
- No product listedUncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an...5.4 Medium
- intel quickassist technologyUncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0...5.4 Medium
- amd aim-t (amd integrated management technology) softwareA DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability...7.3 High
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability7.3 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.10 +5 more +7 moreVisual Studio Installer Elevation of Privilege Vulnerability7.3 High
- siemens modelsim, questa +1 moreA vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions <...5.4 Medium
- No product listedTally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the...7.8 High
- No product listedNetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary...7.3 High
- flexera flexnet publisherLocal privilege escalation in FlexNet Publisher8.5 High
- silabs.com usbxpress win 98se dev kitUncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer8.6 High
- silabs.com usbxpress sdkUncontrolled search path can lead to DLL hijacking in USBXpress SDK installer8.6 High
- silabs.com usbxpress 4 sdkUncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer8.6 High
- silabs.com usbxpress dev kitUncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer8.6 High
- silabs.com cp210x vcp windowsUncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer8.6 High
- silabs.com cp210 vcp win 2kUncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer8.6 High
- silabs.com toolstickUncontrolled search path can lead to DLL hijacking in ToolStick installer8.6 High
- silabs.com flash programming utilityUncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer8.6 High
- silabs.com configuration wizard 2Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer8.6 High
- silabs.com silicon labs ide (8-bit)Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer8.6 High
- ibm cognos dashboards on cloud pak for dataIBM Cognos Dashboards on Cloud Pak for Data privilege escalation8.8 High
- No product listedA DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via...7.8 High
- adobe photoshop, photoshop desktop +1 morePhotoshop Desktop | Uncontrolled Search Path Element (CWE-427)7.8 High
- sap se sapsetupDLL Hijacking vulnerability in SAPSetup7.8 High
- acronis cyber protect 16, cyber protect +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...6.6 Medium
- acronis cyber protect 16, cyber protect +1 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...7.3 High
- trend micro, inc. micro deep security, trendmicro deep security agent +1 moreAn incorrect permissions assignment vulnerability in Trend Micro Deep Security 20.0 agents...6.7 Medium
- qnap qvpn, qnap systems inc. qvpn windows +1 moreQVPN Device Client7.8 High
- sap se product lifecycle costingDLL Hijacking vulnerability in SAP Product Lifecycle Costing3.3 Low
- iconics genesis64, mitsubishi electric corporation genesis32, hyper historian +2 more +4 moreMalicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS327.8 High
- iconics genesis64, mitsubishi electric corporation genesis32, hyper historian +2 more +4 moreMalicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS327.8 High
- Show moreLoading…