CWE-426.

Microsoft Dataverse Remote Code Execution Vulnerability

• Microsoft Power Platform
• CWE-426

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process.

• CWE-426

Intelbras InControl incontrolWebcam Service unquoted search path

• Intelbras InControl
• CWE-426
• CWE-428

iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 reference.

• CWE-426

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• CWE-426

An issue was discovered in Apiris Kafeo 6.4.4.

• CWE-426

PHOENIX CONTACT: Privilege escalation in CHARX Series

• PHOENIX CONTACT CHARX SEC-3000
• PHOENIX CONTACT CHARX SEC-3050
• CWE-426

ndsudo: local privilege escalation via untrusted search path

• netdata
• CWE-426

Windows Kernel Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-426

Lightroom Desktop | Untrusted Search Path (CWE-426)

• Adobe Lightroom Desktop
• CWE-426

Windows OLE Remote Code Execution Vulnerability

• Microsoft Windows 11 version 22H2
• Microsoft Windows 11 version 22H3
• CWE-426

Microsoft Exchange Server Remote Code Execution Vulnerability

• Microsoft Exchange Server 2019 Cumulative Update 14
• Microsoft Exchange Server 2019 Cumulative Update 13
• CWE-426

Dynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid Software

• CDAC AppSamvid Software
• CWE-426

electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

• CWE-426
• CWE-427

<24.13.2 · fixed in 24.13.2

Zoom Clients - Untrusted Search Path

• Zoom Video Communications, Inc. Zoom Clients
• CWE-426

PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

• CWE-426

<5.0.0-psw-wix.0251-40 · fixed in 5.0.0-psw-wix.0251-40

Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

• CWE-426

<3.15.0-a44 · fixed in 3.15.0-a44

WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

• CWE-426

<3.14.0 || >=4.0.0, <4.0.4 · fixed in 3.14.0, 4.0.4

Untrusted search path in Cybozu, Inc. Cybozu KUNAI for Android

• Cybozu, Inc. Cybozu KUNAI for Android
• CWE-426

Yarn untrusted search path vulnerability

• CWE-426

<1.22.13 · fixed in 1.22.13

Binary Planting Attack on Windows Platforms in Creditcoin

• gluwa creditcoin
• CWE-426

Untrusted search path under some conditions on Windows allows arbitrary code execution

• CWE-426

<3.1.41 · fixed in 3.1.41

Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability

• Microsoft Printer Metadata Troubleshooter Tool
• CWE-426

Untrusted search path in Dell SupportAssist Client Consumer

• Dell SupportAssist Client Consumer
• CWE-426

Untrusted search path in Zoom Video Communications, Inc. Zoom Desktop Client for Windows…

• Zoom Video Communications, Inc. Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows
• CWE-426

XAML Diagnostics Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-426

Apache Hadoop allows local user to gain root privileges

• CWE-426

>=3.3.1, <3.3.5 · fixed in 3.3.5

Untrusted search path in Zoom Video Communications, Inc. Zoom Rooms Client for Windows and Zoom VDI…

• Zoom Video Communications, Inc. Zoom Rooms Client for Windows and Zoom VDI Client
• CWE-426

Untrusted search path in Fortinet FortiClientWindows

• Fortinet FortiClientWindows
• CWE-426

Windows User Interface Application Core Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-426

Microsoft Windows Defender Elevation of Privilege Vulnerability

• Microsoft Windows Defender Antimalware Platform
• CWE-426

Privilege Escalation for ZCC macOS via PATH Variable

• Zscaler Client Connector
• CWE-426

Microsoft Exchange Server Remote Code Execution Vulnerability

• Microsoft Exchange Server 2019 Cumulative Update 13
• Microsoft Exchange Server 2019 Cumulative Update 12
• CWE-426

Skype for Business Remote Code Execution Vulnerability

• Microsoft Skype for Business Server 2019 CU7
• Microsoft Skype for Business Server 2015 CU13
• CWE-426

Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-426

Untrusted search path in Zoom Video Communications, Inc. CleanZoom

• Zoom Video Communications, Inc. CleanZoom
• CWE-426

Untrusted Search Path in vim/vim

• vim/vim
• CWE-426

GitPython untrusted search path on Windows systems leading to arbitrary code execution

• CWE-426

<3.1.33 · fixed in 3.1.33

Adobe Acrobat Reader Untrusted Search Path Application denial-of-service

• Adobe Acrobat Reader
• CWE-426

Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

• Microsoft Windows 11 version 21H2
• Microsoft Windows 11 version 22H2
• CWE-426

Untrusted search path in Zoom Video Communications, Inc. Zoom Desktop Client for Windows

• Zoom Video Communications, Inc. Zoom Desktop Client for Windows
• CWE-426

Untrusted search path in Zoom Video Communications, Inc. Zoom Rooms for Windows

• Zoom Video Communications, Inc. Zoom Rooms for Windows
• CWE-426

Untrusted search path in Zoom Video Communications, Inc. Zoom Rooms for Windows

• Zoom Video Communications, Inc. Zoom Rooms for Windows
• CWE-426

Untrusted search path in Zoom Video Communications, Inc. Zoom Rooms for Windows

• Zoom Video Communications, Inc. Zoom Rooms for Windows
• CWE-426

Windows Geolocation Service Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-426

sccache vulnerable to privilege escalation if server is run as root

• CWE-426

<0.4.0 · fixed in 0.4.0

SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.

• CWE-426

kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.

• CWE-426

Local Privilege Escalation

• Qualys Cloud Agent
• CWE-426

An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary commands via the pdfelement-pro_setup_full5239.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireel_setup_full9589.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoverit_setup_full4134.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairit_setup_full5913.exe file.

• CWE-426

An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file.

• CWE-426

An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreator_setup_full7743.exe file.

• CWE-426

An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter14_64bit_setup_full14204.exe file.

• CWE-426

An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmora_setup_full846.exe.

• CWE-426