CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- action1, action1 agent +1 moreAction1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- jupyter coreJupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.3 High
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking6.5 Medium
- hcl software traveler for microsoft outlook (htmo), hcltech traveler for microsoft outlook +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking6.5 Medium
- wondershare filmoraWondershare Filmora Installer NFWCHK.exe uncontrolled search path7.3 High
- sangfor atrust, 零信任访问控制系统 atrust +1 moreSangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path7.3 High
- abb aspect-enterprise, matrix series, nexus series +2 moreBinary Planting / LoadLibrary DLL's not Signed7.1 High
- forcepoint fie endpointPrivilege Escalation and Arbitrary code execution in F1E Endpoint7.3 High
- blizzard battle.netAn issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing...8.4 High
- cbewin anytxt searcherCBEWIN Anytxt Searcher ATService.exe uncontrolled search path7.3 High
- No product listedUncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to...5.4 Medium
- No product listedUncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows...5.4 Medium
- intel advisor, oneapi base toolkit +1 moreUncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel...5.4 Medium
- No product listedUncontrolled search path element for some Intel(R) Ethernet Connection software before version 29...5.4 Medium
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Uncontrolled Search Path Element (CWE-427)7.8 High
- amd aim-t manageability apiA DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve...7.3 High
- checkmkPrivilege escalation in jar_signature5.2 Medium
- conda-forge miniforge, openssl-feedstock +1 moreconda-forge openssl-feedstock writable OPENSSLDIR7.0 High
- hainan todeskHainan ToDesk DLL File Parser profapi.dll uncontrolled search path7.3 High
- shanghai bairui information technology sunloginclientShanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path7.3 High
- discordDiscord WINSTA.dll uncontrolled search path7.3 High
- patch my pc home updaterPatch My PC Home Updater System.IO uncontrolled search path7.3 High
- mechrevo control consoleMechrevo Control Console GCUService csCAPI.dll uncontrolled search path7.3 High
- ribbon communications apollo 9608Ribbon Communications - CWE-427: Uncontrolled Search Path Element7.6 High
- bdrive netdriveBdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- bdrive netdriveBdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- No product listedDPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking. It happens by placing a malicious DLL in a...7.8 High
- opentext secure content managerInsecure Dynamic-Link Library (DLL) Load vulnerability7.0 High
- bleachbitBleachBit for Windows Has DLL Untrusted Path Vulnerability7.3 High
- microsoft power automate for desktopMicrosoft Power Automate Desktop Information Disclosure Vulnerability5.7 Medium
- microsoft sql server management studio, sql server management studio 20.2, visual studio tools for applications (vsta) +6 more +8 moreVisual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability7.3 High
- ni labviewDLL Hijacking Vulnerability in NI LabVIEW7.0 High
- ni labviewDLL Hijacking Vulnerability in NI LabVIEW When Loading NI Error Reporting7.0 High
- microsoft visual studio 2022 version 17.10, visual studio 2022 version 17.12, visual studio 2022 version 17.8 +1 more +3 moreVisual Studio Elevation of Privilege Vulnerability7.3 High
- ivanti endpoint managerDLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7...7.8 High
- eset safe server, small business security, eset, spol. s r.o. eset endpoint antivirus for windows +10 more +12 moreDLL Search Order Hijacking in ESET products for Windows8.4 High
- rrwo linux::statm::tinyLinux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory6.5 Medium
- tobyink sub::handlesviaSub::HandlesVia for Perl allows untrusted code to be included from the current working directory6.5 Medium
- tobyink miteMite for Perl generates code with an untrusted search path vulnerability6.5 Medium
- microsoft visual studio codeVisual Studio Code Elevation of Privilege Vulnerability7.3 High
- microsoft visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.10, visual studio 2022 version 17.12 +4 more +6 moreVisual Studio Elevation of Privilege Vulnerability7.3 High
- microsoft visual studio 2017 version 15.9 (includes 15.0 - 15.8), visual studio 2019 version 16.11 (includes 16.0 - 16.10), visual studio 2022 version 17.10 +6 more +8 moreVisual Studio Elevation of Privilege Vulnerability7.3 High
- carrier block loadCarrier Block Load Privilege Escalation7.1 High
- Show moreLoading…