CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- yandex telemostDylib Hijacking in Yandex Telemost7.3 High
- yandex diskDylib Hijacking in Yandex Disk7.3 High
- sublimetext sublime text 3Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could...9.8 Critical
- nvidia tao, tao toolkit +1 moreNVIDIA TAO contains a vulnerability where an attacker may cause a resource to be loaded via an...8.8 High
- vimVim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 High
- synaptics fingerprint driverCo-Installer Privilege Escalation6.6 Medium
- sony corporation inzone hubThe installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path,...8.4 High
- logstare inc. installer of logstare collector (for windows), secuavail logstare collector +1 moreUncontrolled search path element issue exists in the installer of LogStare Collector (for Windows...8.4 High
- asustor abp and aesWindows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges9.3 Critical
- nec corporation rakurakumusen start exDLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a...8.4 High
- mitsubishi electric corporation milco.s easy setting application (ir), milco.s easy switch application (ir), milco.s setting application +1 more +3 moreMalicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S7.7 High
- socketdev firewall-releaseExternal Control of System or Configuration Setting and Uncontrolled Search Path Element in sfw7.3 High
- siemens software center, solid edge se2025 +1 moreA vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge...8.5 High
- siemens altair grid engineA vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected...8.5 High
- No product listedUncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User...5.4 Medium
- No product listedUncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler...5.4 Medium
- No product listedUncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43...5.4 Medium
- No product listedUncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within...5.4 Medium
- No product listedUncontrolled search path for some System Event Log Viewer Utility software for all versions...5.4 Medium
- No product listedUncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Distribution for Python software installers before...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before...5.4 Medium
- No product listedUncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring...5.4 Medium
- No product listedUncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version...5.4 Medium
- No product listedUncontrolled search path for some Display Virtualization for Windows OS software before version...5.4 Medium
- intel computing improvement programUncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within...5.4 Medium
- nvidia nvappNVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can...8.2 High
- hp client management script libraryHP Client Management Script Library – Security Update8.5 High
- No product listedDLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by...7.8 High
- wireless tsukamoto co., ltd. wtw eagle (for windows)The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path,...8.4 High
- No product listedDLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32...8.4 High
- keycloak, red hat build of keycloak 26.4, build of keycloak 26.4.4 +2 moreOrg.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console3.7 Low
- docker desktopMultiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows8.8 High
- No product listedLibreWolf Installer setup.nsi uncontrolled search path7.3 High
- lenovo pc manager, pcmanager +1 moreA potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an...8.5 High
- rsupport co., ltd. remotecall remote support program (for operator)RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled...8.5 High
- rsupport co., ltd. remotecall remote support program (for operator)RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled...8.5 High
- rsupport co., ltd. remoteview pc application consoleRemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path...8.5 High
- fortinet forticlient, forticlientwindows +1 moreAn Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through...6.0 Medium
- eaton ipp softwareImproper authentication of library files in the Eaton IPP software installer could lead to...8.6 High
- nvidia geforce, rtx, quadro, nvs, tesla +2 moreNVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead...8.2 High
- checkmkPrivilege Escalation in Windows License plugin for Checkmk Windows Agent8.8 High
- ankitects ankiIn Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable...6.7 Medium
- denso ten limited. multiple installers of denso ten drive recorder viewerThe installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path,...8.4 High
- zabbixDLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration7.3 High
- panasonic autodownloaderInstaller of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL...8.4 High
- nvidia nsight graphicsNVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an...6.7 Medium
- digisign digisigner oneDigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking.8.8 High
- acronis true image, true image for sandisk, true image for western digital +1 more +3 moreLocal privilege escalation due to DLL hijacking vulnerability. The following products are...7.3 High
- Show moreLoading…