CWE-427: Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
Also known as DLL preloading, Binary planting, Insecure library loading.
A kind of CWE-668 Exposure of Resource to Wrong Sphere.
From the CWE List. © The MITRE Corporation.
Newest
- No product listedAn issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to...7.8 High
- palo alto networks prisma access agentPrisma Access Agent: Local Privilege Escalation6.0 Medium
- ibm iIBM i is Affected By Remote Code Execution Vulnerability []9.9 Critical
- amd ryzen™ master, ryzen™ master (amd ryzen™ 3000 series processors), ryzen™ master sdk +2 moreA DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user...7.0 High
- amd power design manager (pdm) software un-installerA DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker...7.0 High
- amd vitis™ unified installer for fpgas & adaptive socs in windowsUncontrolled search paths in Vitis™ Unified installation path on local Windows machines could...7.3 High
- amd vitis™ embedded single file download (sfd) for windowsUncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows...7.3 High
- intel hardware-aware-automated-machine-learningUncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version...5.4 Medium
- intel approximate bayesian inference frameworkUncontrolled search path for some Approximate Bayesian Inference Framework before version on...5.4 Medium
- No product listedUncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User...5.4 Medium
- line corporation for windows, ly corporation line for windows +1 moreA vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0,...8.4 High
- lucid vision labs arena sdkLUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows8.8 High
- integrated systems technologies, inc. netkids imarkNetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search...5.4 Medium
- amazon kiro cliExecutable Resolution from Untrusted Project Directory in Kiro CLI on Windows8.5 High
- amazon kiro ideExecutable Resolution from Untrusted Project Directory in Kiro IDE on Windows8.5 High
- national security agency ghidraGhidra Swift Demangler Analyzer Arbitrary Code Execution via Project State7.1 High
- checkmal appcheck proCheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sys uncontrolled search path7.3 High
- endress+hauser fdi package libraryiDTM FDI Unauthorized Debug Interface Enablement8.4 High
- adobe photoshop installerPhotoshop Installer | CWE-427: Uncontrolled Search Path Element8.6 High
- arksigner software and hardware industry and trade inc. desktop clientSearch Order Hijacking in ArkSigner's ArkSigner Desktop Client7.3 High
- geovision inc. gv-ip device utilityGeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability7.3 High
- hcl software traveler for microsoft outlook (htmo), hclsoftware hcl traveler for microsoft outlook (htmo) +1 moreHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking6.5 Medium
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 7 +5 more +7 morePipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading8.8 High
- mervinpraison praisonaiPraisonAI before 1.6.78 Remote Code Execution via Plugin Auto-Discovery8.6 High
- sbi securities co.,ltd. hyper sbi 2The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL...8.4 High
- adobe creative cloud desktop, creative cloud desktop application +1 moreCreative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)7.8 High
- sap se saprouter on microsoft windowsDLL Hijacking vulnerability in SAProuter on Microsoft Windows8.4 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Search Path Element (CWE-427)8.2 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Uncontrolled Search Path Element (CWE-427)8.2 High
- lenovo pc managerTencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path7.3 High
- foxit pdf editor, pdf reader +1 moreFoxit PDF Editor/Reader Local Privilege Escalation8.2 High
- fuji electric co.,ltd. pupsmanUncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted...8.4 High
- rizonesoft notepad3Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About...7.8 High
- electron-userland app-builder-lib, electron electron-builder +1 moreelectron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`7.8 High
- abb 800xa for advant master, control builder a +1 moreAdvant Master Online Builder DLL vulnerability4.1 Medium
- vllmvLLM: Dependency Confusion Vulnerability in vLLM Dockerfile8.8 High
- angular, angular language service +1 moreAngular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension8.7 High
- papercut print deployInsecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows7.3 High
- anssi dfir-orcLocal privilege escalation in ANSSI’s DFIR-ORC7.3 High
- python software foundation cpythonCPython >3.11 Insecure Input Validation resulting in privilege escalation5.3 Medium
- dell peripheral managerDell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path...6.7 Medium
- dell peripheral managerDell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element...6.7 Medium
- hp inc. one agent software, hp, inc. hp one agent software +1 moreHP One Agent Software – Security Update8.5 High
- konica minolta japan, inc. multiple printer driversMultiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a...8.5 High
- mobatek mobaxterm personal edition (portable)Arbitrary code execution in MobaXterm Personal Edition (Portable)8.5 High
- mobatek mobaxterm personal edition (portable)Arbitrary code execution in MobaXterm Personal Edition (Portable)8.5 High
- openclawOpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution7.3 High
- ibm iIBM i is Affected by Privilege Escalation []8.8 High
- checkpoint identity agentLocal Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS7.8 High
- lenovo lanschool classicA potential uncontrolled search path vulnerability was reported in the LanSchool Classic client...8.5 High
- Show moreLoading…