CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- seagate toolkitIn Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2...7.0 High
- No product listedNotepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to...8.4 High
- salesforce cliUncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows...8.8 High
- asterisk, sangoma certified asterisk +1 moreAsterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation7.0 High
- No product listedA DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate...7.8 High
- lenovo browserA potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal...8.5 High
- broadcom 8.6.it management suiteElevation of Privileges Vulnerability in IT Management Suite8.8 High
- updfDLL search path hijacking vulnerability7.0 High
- updfDLL search path hijacking vulnerability7.0 High
- updfDLL search path hijacking vulnerability7.0 High
- grandstream networks waveDLL search order hijack in Wave by Grandstream Networks7.0 High
- lizardbyte sunshine, sunshine for windows +1 moreLizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability7.8 High
- kujirahand tkeasyguiTkEasyGUI Affected by Uncontrolled Search Path Element Issue8.5 High
- foxit pdf reader, pdf editor +1 moreFoxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- nomachineNoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- mechrevo control center gx v2Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path7.3 High
- mechrevo control center gx v2Mechrevo Control Center GX V2 reg File uncontrolled search path7.3 High
- adobe substance3d - modeler, substance 3d modeler +1 moreSubstance3D - Modeler | Uncontrolled Search Path Element (CWE-427)7.8 High
- No product listedUncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an...5.4 Medium
- No product listedUncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before...5.4 Medium
- No product listedUncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025...5.4 Medium
- No product listedUncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an...5.4 Medium
- No product listedUncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may...5.4 Medium
- siemens automation license manager v6.0, automation license manager v6.2, cemat v10.0 +136 more +138 moreThe affected setup component is vulnerable to DLL hijacking. This could allow an attacker to...8.5 High
- No product listedParamount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code...7.7 High
- No product listedParamount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with...7.7 High
- elastic beatsBeats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer7.0 High
- elastic apm serverAPM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer7.0 High
- microsoft windows 11DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs5.4 Medium
- commvault for windowsCommvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection8.5 High
- arm development studioUncontrolled Search Path Element in Arm Development Studio before 20255.9 Medium
- lenovo trackpoint quick menuA DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain...5.4 Medium
- lenovo software fixA DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart...7.1 High
- sophos intercept x for windows installerA local privilege escalation vulnerability in the Intercept X for Windows installer prior version...7.5 High
- panda security antivirus pro 2016, global protection 2016, internet security 2016 +1 more +3 morePanda Security PSEvents.exe Insecure DLL Loading Privilege Escalation8.5 High
- emerson valvelink dtm, valvelink prm, valvelink snap-on +1 more +3 moreEmerson ValveLink Products Uncontrolled Search Path Element5.9 Medium
- ibm iIBM i privilege escalation8.8 High
- notepad-plus-plusNotepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path7.3 High
- mattermost, mattermost server +1 morePath Traversal Leading to RCE by Any Authenticated Mattermost User9.9 Critical
- checkpoint check point smartconsole, smartconsole +1 moreDLL-HiJacking6.5 Medium
- google osv-scalibrArbitrary File write in OSV-SCALIBR5.7 Medium
- trend micro, inc. micro worry-free business security services, trendmicro worry-free business security services +1 moreAn uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security...6.8 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow...6.7 Medium
- trend micro apex one, trend micro, inc. micro apex one, micro apex one as a service +2 moreAn uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module...8.8 High
- ibm iIBM i privilege escalation7.5 High
- thevindu-w clip share serverClipShare Server Allows Local Privilege Escalation via DLL Hijacking7.3 High
- Show moreLoading…