# CWE-427. Every Advisory and CVE whose sources give the weakness CWE-427, newest first. ## Records, newest first (an older page) - [Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler software](https://agentprime.io/advisories/CVE-2024-47795.md) `CVE-2024-47795` · CVE record: Intel(R) oneAPI DPC++/C++ Compiler software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Arc™ \& Iris(R) Xe graphics software](https://agentprime.io/advisories/CVE-2024-46895.md) `CVE-2024-46895` · CVE record: Intel(R) Arc™ \& Iris(R) Xe graphics software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) QAT software](https://agentprime.io/advisories/CVE-2024-39833.md) `CVE-2024-39833` · CVE record: Intel(R) QAT software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) oneAPI Level Zero software](https://agentprime.io/advisories/CVE-2024-31073.md) `CVE-2024-31073` · CVE record: Intel(R) oneAPI Level Zero software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Graphics software](https://agentprime.io/advisories/CVE-2025-21099.md) `CVE-2025-21099` · CVE record: Intel(R) Graphics software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Network Adapter Driver installers for Windows 11](https://agentprime.io/advisories/CVE-2025-20108.md) `CVE-2025-20108` · CVE record: Intel(R) Network Adapter Driver installers for Windows 11 · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Advisor software](https://agentprime.io/advisories/CVE-2025-20079.md) `CVE-2025-20079` · CVE record: Intel(R) Advisor software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) RealSense™ SDK software](https://agentprime.io/advisories/CVE-2025-20043.md) `CVE-2025-20043` · CVE record: Intel(R) RealSense™ SDK software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe…](https://agentprime.io/advisories/CVE-2025-20041.md) `CVE-2025-20041` · CVE record: Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Ethernet Connection software](https://agentprime.io/advisories/CVE-2025-20015.md) `CVE-2025-20015` · CVE record: Intel(R) Ethernet Connection software · CVSS 5.4 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2025-43553.md) `CVE-2025-43553` · CVE record: Adobe Substance3D - Modeler · CVSS 7.8 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Privilege escalation in jar_signature](https://agentprime.io/advisories/CVE-2025-32917.md) `CVE-2025-32917` · CVE record: Checkmk GmbH Checkmk · CVSS 5.2 Medium · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [conda-forge openssl-feedstock writable OPENSSLDIR](https://agentprime.io/advisories/CVE-2025-35471.md) `CVE-2025-35471` · CVE record: conda-forge openssl-feedstock and 1 more · CVSS 7.0 High · Not analysed yet · Published 13 May 2025 · Tags: CWE-427 - [Hainan ToDesk DLL File Parser profapi.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4539.md) `CVE-2025-4539` · CVE record: Hainan ToDesk · CVSS 7.3 High · Not analysed yet · Published 11 May 2025 · Tags: CWE-426, CWE-427 - [Shanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4532.md) `CVE-2025-4532` · CVE record: Shanghai Bairui Information Technology SunloginClient · CVSS 7.3 High · Not analysed yet · Published 11 May 2025 · Tags: CWE-426, CWE-427 - [Discord WINSTA.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4525.md) `CVE-2025-4525` · CVE record: Discord · CVSS 7.3 High · Not analysed yet · Published 10 May 2025 · Tags: CWE-426, CWE-427 - [Patch My PC Home Updater System.IO uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4455.md) `CVE-2025-4455` · CVE record: Patch My PC Home Updater · CVSS 7.3 High · Not analysed yet · Published 9 May 2025 · Tags: CWE-426, CWE-427 - [Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-4272.md) `CVE-2025-4272` · CVE record: Mechrevo Control Console · CVSS 7.3 High · Not analysed yet · Published 5 May 2025 · Tags: CWE-426, CWE-427 - [Ribbon Communications - CWE-427: Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2025-23177.md) `CVE-2025-23177` · CVE record: Ribbon Communications Apollo 9608 · CVSS 7.6 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-427 - [Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-2769.md) `CVE-2025-2769` · CVE record: Bdrive NetDrive · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2025 · Tags: CWE-427 - [Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2025-2768.md) `CVE-2025-2768` · CVE record: Bdrive NetDrive · CVSS 7.8 High · Not analysed yet · Published 23 Apr 2025 · Tags: CWE-427 - [DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking.](https://agentprime.io/advisories/CVE-2025-43950.md) `CVE-2025-43950` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 Apr 2025 · Tags: CWE-427 - [Insecure Dynamic-Link Library (DLL) Load vulnerability](https://agentprime.io/advisories/CVE-2024-12530.md) `CVE-2024-12530` · CVE record: OpenText Secure Content Manager · CVSS 7.0 High · Not analysed yet · Published 17 Apr 2025 · Tags: CWE-427 - [BleachBit for Windows Has DLL Untrusted Path Vulnerability](https://agentprime.io/advisories/CVE-2025-32780.md) `CVE-2025-32780` · CVE record: bleachbit bleachbit · CVSS 7.3 High · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-427 - [Microsoft Power Automate Desktop Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-29817.md) `CVE-2025-29817` · CVE record: Microsoft Power Automate for Desktop · CVSS 5.7 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-427 - [Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29803.md) `CVE-2025-29803` · CVE record: Microsoft SQL Server Management Studio 20.2 and 3 more · CVSS 7.3 High · Not analysed yet · Published 12 Apr 2025 · Tags: CWE-427 - [DLL Hijacking Vulnerability in NI LabVIEW](https://agentprime.io/advisories/CVE-2025-2630.md) `CVE-2025-2630` · CVE record: NI LabVIEW · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-427 - [DLL Hijacking Vulnerability in NI LabVIEW When Loading NI Error Reporting](https://agentprime.io/advisories/CVE-2025-2629.md) `CVE-2025-2629` · CVE record: NI LabVIEW · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2025 · Tags: CWE-427 - [Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-29802.md) `CVE-2025-29802` · CVE record: Microsoft Microsoft Visual Studio 2022 version 17.10 and 2 more · CVSS 7.3 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-427 - [Uncontrolled search path in Ivanti Endpoint Manager](https://agentprime.io/advisories/CVE-2025-22458.md) `CVE-2025-22458` · CVE record: Ivanti Endpoint Manager · CVSS 7.8 High · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-427 - [DLL Search Order Hijacking in ESET products for Windows](https://agentprime.io/advisories/CVE-2024-11859.md) `CVE-2024-11859` · CVE record: ESET, spol. s r.o. ESET NOD32 Antivirus and 4 more · CVSS 8.4 High · Not analysed yet · Published 7 Apr 2025 · Tags: CWE-427 - [Linux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory](https://agentprime.io/advisories/CVE-2025-3051.md) `CVE-2025-3051` · CVE record: RRWO Linux::Statm::Tiny · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: CWE-427 - [Sub::HandlesVia for Perl allows untrusted code to be included from the current working directory](https://agentprime.io/advisories/CVE-2025-30673.md) `CVE-2025-30673` · CVE record: TOBYINK Sub::HandlesVia · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: CWE-427 - [Mite for Perl generates code with an untrusted search path vulnerability](https://agentprime.io/advisories/CVE-2025-30672.md) `CVE-2025-30672` · CVE record: TOBYINK Mite · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2025 · Tags: CWE-427 - [Visual Studio Code Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-26631.md) `CVE-2025-26631` · CVE record: Microsoft Visual Studio Code · CVSS 7.3 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-427 - [Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-25003.md) `CVE-2025-25003` · CVE record: Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) and 4 more · CVSS 7.3 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-427 - [Visual Studio Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24998.md) `CVE-2025-24998` · CVE record: Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) and 4 more · CVSS 7.3 High · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-427 - [Carrier Block Load Privilege Escalation](https://agentprime.io/advisories/CVE-2024-10930.md) `CVE-2024-10930` · CVE record: Carrier Block Load · CVSS 7.1 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-427 - [Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.](https://agentprime.io/advisories/CVE-2020-23438.md) `CVE-2020-23438` · CVE record · CVSS 7.8 High · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-427 - [Blizzard Battle.Net profapi.dll uncontrolled search path](https://agentprime.io/advisories/CVE-2025-1804.md) `CVE-2025-1804` · CVE record: Blizzard Battle.Net · CVSS 7.3 High · Not analysed yet · Published 1 Mar 2025 · Tags: CWE-426, CWE-427 - [IBM i privilege escalation](https://agentprime.io/advisories/CVE-2024-55898.md) `CVE-2024-55898` · CVE record: IBM i · CVSS 8.5 High · Not analysed yet · Published 24 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Trend Micro, Inc. Trend Micro HouseCall for Home Networks](https://agentprime.io/advisories/CVE-2022-28339.md) `CVE-2022-28339` · CVE record: Trend Micro, Inc. Trend Micro HouseCall for Home Networks · CVSS 7.3 High · Not analysed yet · Published 22 Feb 2025 · Tags: CWE-427 - [An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data](https://agentprime.io/advisories/CVE-2025-1223.md) `CVE-2025-1223` · CVE record: Citrix Secure Access Client for Mac · CVSS 5.8 Medium · Not analysed yet · Published 20 Feb 2025 · Tags: CWE-427 - [Local Privilege Escalation in Rufus 4.6 and previous versions](https://agentprime.io/advisories/CVE-2025-26624.md) `CVE-2025-26624` · CVE record: pbatard rufus · CVSS 6.8 Medium · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-426, CWE-427 - [Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program](https://agentprime.io/advisories/CVE-2024-57964.md) `CVE-2024-57964` · CVE record: Hitachi HVAC Energy Saving Program · CVSS 7.3 High · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-427 - [Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER](https://agentprime.io/advisories/CVE-2024-57963.md) `CVE-2024-57963` · CVE record: Hitachi USB-CONVERTERCABLE DRIVER · CVSS 7.3 High · Not analysed yet · Published 18 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler software for Windows](https://agentprime.io/advisories/CVE-2024-39365.md) `CVE-2024-39365` · CVE record: Intel(R) oneAPI DPC++/C++ Compiler software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Software](https://agentprime.io/advisories/CVE-2024-42405.md) `CVE-2024-42405` · CVE record: Intel(R) Quartus(R) Prime Software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Thread Director Visualizer software](https://agentprime.io/advisories/CVE-2024-36283.md) `CVE-2024-36283` · CVE record: Intel(R) Thread Director Visualizer software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) RealSense D400 Series](https://agentprime.io/advisories/CVE-2024-47006.md) `CVE-2024-47006` · CVE record: Intel(R) RealSense D400 Series · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) High Level Synthesis Compiler software](https://agentprime.io/advisories/CVE-2024-36280.md) `CVE-2024-36280` · CVE record: Intel(R) High Level Synthesis Compiler software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) XTU software for Windows](https://agentprime.io/advisories/CVE-2024-39372.md) `CVE-2024-39372` · CVE record: Intel(R) XTU software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Ethernet Adapter Complete Driver Pack](https://agentprime.io/advisories/CVE-2024-24852.md) `CVE-2024-24852` · CVE record: Intel(R) Ethernet Adapter Complete Driver Pack · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Chipset Software Installation Utility](https://agentprime.io/advisories/CVE-2024-36291.md) `CVE-2024-36291` · CVE record: Intel(R) Chipset Software Installation Utility · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) MPI Library for Windows software](https://agentprime.io/advisories/CVE-2024-32938.md) `CVE-2024-32938` · CVE record: Intel(R) MPI Library for Windows software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Advisor software](https://agentprime.io/advisories/CVE-2024-39284.md) `CVE-2024-39284` · CVE record: Intel(R) Advisor software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in EPCT software](https://agentprime.io/advisories/CVE-2024-39813.md) `CVE-2024-39813` · CVE record: EPCT software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in BIOS and System Firmware Update Package for Intel(R) Server M50FCP family](https://agentprime.io/advisories/CVE-2024-42492.md) `CVE-2024-42492` · CVE record: BIOS and System Firmware Update Package for Intel(R) Server M50FCP family · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) VPL software](https://agentprime.io/advisories/CVE-2024-21830.md) `CVE-2024-21830` · CVE record: Intel(R) VPL software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) QuickAssist Technology software](https://agentprime.io/advisories/CVE-2024-29223.md) `CVE-2024-29223` · CVE record: Intel(R) QuickAssist Technology software · CVSS 5.4 Medium · Not analysed yet · Published 12 Feb 2025 · Tags: CWE-427 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .