CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- asterisk, sangoma certified asterisk +1 moreAsterisk vulnerable to potential privilege escalation0.0 None
- roland corporation cloud managerThe installer for Roland Cloud Manager ver.3.1.19 and prior insecurely loads Dynamic Link...8.4 High
- bobthecow psyshPsySH has Local Privilege Escalation via CWD .psysh.php auto-load6.7 Medium
- broadcom symantec endpoint protection windows clientComponent Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client4.4 Medium
- fujifilm business innovation corp. beat-access for windowsbeat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which...5.4 Medium
- western digital wd discoveryDLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows...8.9 High
- micron technology, inc. crucial storage executiveCrucial Storage Executive < 11.08.082025.00 Installer DLL Preloading LPE7.1 High
- discord clientDiscord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.3 High
- d-link d-view 8D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path8.4 High
- fsas technologies inc. serverview agents for windowsThe installer of ServerView Agents for Windows provided by Fsas Technologies Inc. may insecurely...8.4 High
- nvidia cuda toolkitNVIDIA Nsight Systems for Windows contains a vulnerability in the application’s DLL loading...6.7 Medium
- nvidia cuda toolkitNVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an...7.3 High
- aveva process optimizationAVEVA Process Optimization Uncontrolled Search Path Element9.3 Critical
- cooler master technology inc. master masterplusCoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path8.5 High
- pioneer corporation stellanova aps-s301 series, stellanova limited aps-s202j-lm, stellanova lite aps-s201jgl +7 more +9 moreThe installers for multiple products provided by PIONEER CORPORATION contain an issue with the...8.5 High
- nrel beoptNREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution8.6 High
- altera quartus prime lite, quartus prime standard, intel quartus prime +2 moreQuartus® Prime Standard and Quartus® Prime Lite Security Advisory5.4 Medium
- altera quartus prime lite, quartus prime standard, intel quartus prime +2 moreQuartus® Prime Standard and Quartus® Prime Lite Security Advisory5.4 Medium
- altera quartus prime pro, intel quartus prime +1 moreQuartus Prime Pro Edition Advisory5.4 Medium
- altera quartus prime pro, intel quartus prime +1 moreQuartus Prime Pro Edition Installer Advisory5.4 Medium
- samsung magicianAn issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates...7.8 High
- trueconfTrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local...7.1 High
- eaton ups companion software, ups companion +1 moreDue to insecure library loading in the Eaton UPS Companion software executable, an attacker with...7.8 High
- eaton ups companion software, ups companion +1 moreImproper authentication of library files in the Eaton UPS Companion software installer could lead...8.6 High
- soda pdf desktop, sodapdf soda pdf +1 moreSoda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability7.8 High
- pdfsam enhancedPDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability6.6 Medium
- tradingview desktopTradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability7.8 High
- filezilla-project filezilla clientFileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll8.5 High
- hubstaffHubstaff 1.6.13 and 1.6.14 DLL Search Order Hijacking via wow64log Library8.5 High
- jupyter nbconvertnbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows8.5 High
- altera high level synthesis compilerHigh Level Synthesis Compiler Security Advisory5.4 Medium
- altera high level synthesis compilerHigh Level Synthesis Compiler Security Advisory5.4 Medium
- altera quartus prime standard, intel quartus prime +1 moreQuartus Prime Standard Security Advisory5.4 Medium
- altera quartus prime pro, intel quartus prime +1 moreQuartus Prime Pro Edition Advisory5.4 Medium
- altera quartus prime standard, intel quartus prime +1 moreQuartus Prime Standard Security Advisory5.4 Medium
- teamviewer dex, digital employee experience +1 morePrivilege Escalation via Process Hijacking in 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction6.5 Medium
- teamviewer dex, digital employee experience +1 morePrivilege Escalation via Uncontrolled Search Path in 1E-Nomad-SetWorkRate instruction6.5 Medium
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL8.5 High
- lenovo one clientA potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal...8.5 High
- lenovo app store, browser +1 moreA DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser...8.5 High
- mailenableMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL8.5 High
- yandex messengerDylib Hijacking in Yandex Messenger7.3 High
- Show moreLoading…