# CWE-427. Every Advisory and CVE whose sources give the weakness CWE-427, newest first. ## Records, newest first (an older page) - [Uncontrolled search path in AIM-T (AMD Integrated Management Technology) software](https://agentprime.io/advisories/CVE-2023-31361.md) `CVE-2023-31361` · CVE record: AMD AIM-T (AMD Integrated Management Technology) software · CVSS 7.3 High · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-427 - [Visual Studio Code Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-24039.md) `CVE-2025-24039` · CVE record: Microsoft Visual Studio Code · CVSS 7.3 High · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-427 - [Visual Studio Installer Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-21206.md) `CVE-2025-21206` · CVE record: Microsoft Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) and 4 more · CVSS 7.3 High · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-427 - [Uncontrolled search path in Siemens ModelSim and others](https://agentprime.io/advisories/CVE-2024-53977.md) `CVE-2024-53977` · CVE record: Siemens ModelSim and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-427 - [Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll.](https://agentprime.io/advisories/CVE-2024-48091.md) `CVE-2024-48091` · CVE record · CVSS 7.8 High · Not analysed yet · Published 7 Feb 2025 · Tags: CWE-427 - [NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies.](https://agentprime.io/advisories/CVE-2024-57426.md) `CVE-2024-57426` · CVE record · CVSS 7.3 High · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-427 - [Local privilege escalation in FlexNet Publisher](https://agentprime.io/advisories/CVE-2024-2658.md) `CVE-2024-2658` · CVE record: Flexera FlexNet Publisher · CVSS 8.5 High · Not analysed yet · Published 30 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer](https://agentprime.io/advisories/CVE-2024-9499.md) `CVE-2024-9499` · CVE record: silabs.com USBXpress Win 98SE Dev Kit · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer](https://agentprime.io/advisories/CVE-2024-9498.md) `CVE-2024-9498` · CVE record: silabs.com USBXpress SDK · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer](https://agentprime.io/advisories/CVE-2024-9497.md) `CVE-2024-9497` · CVE record: silabs.com USBXpress 4 SDK · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer](https://agentprime.io/advisories/CVE-2024-9496.md) `CVE-2024-9496` · CVE record: silabs.com USBXpress Dev Kit · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer](https://agentprime.io/advisories/CVE-2024-9495.md) `CVE-2024-9495` · CVE record: silabs.com CP210x VCP Windows · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer](https://agentprime.io/advisories/CVE-2024-9494.md) `CVE-2024-9494` · CVE record: silabs.com CP210 VCP Win 2k · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in ToolStick installer](https://agentprime.io/advisories/CVE-2024-9493.md) `CVE-2024-9493` · CVE record: silabs.com ToolStick · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer](https://agentprime.io/advisories/CVE-2024-9492.md) `CVE-2024-9492` · CVE record: silabs.com Flash Programming Utility · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer](https://agentprime.io/advisories/CVE-2024-9491.md) `CVE-2024-9491` · CVE record: silabs.com Configuration Wizard 2 · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer](https://agentprime.io/advisories/CVE-2024-9490.md) `CVE-2024-9490` · CVE record: silabs.com Silicon Labs IDE (8-bit) · CVSS 8.6 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [IBM Cognos Dashboards on Cloud Pak for Data privilege escalation](https://agentprime.io/advisories/CVE-2024-41739.md) `CVE-2024-41739` · CVE record: IBM Cognos Dashboards on Cloud Pak for Data · CVSS 8.8 High · Not analysed yet · Published 24 Jan 2025 · Tags: CWE-427 - [A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6.](https://agentprime.io/advisories/CVE-2024-53588.md) `CVE-2024-53588` · CVE record · CVSS 7.8 High · Not analysed yet · Published 23 Jan 2025 · Tags: CWE-427 - [Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2025-21127.md) `CVE-2025-21127` · CVE record: Adobe Photoshop Desktop · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-427 - [DLL Hijacking vulnerability in SAPSetup](https://agentprime.io/advisories/CVE-2025-0069.md) `CVE-2025-0069` · CVE record: SAP_SE SAPSetup · CVSS 7.8 High · Not analysed yet · Published 14 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path in Acronis Cyber Protect 16](https://agentprime.io/advisories/CVE-2024-55540.md) `CVE-2024-55540` · CVE record: Acronis Acronis Cyber Protect 16 · CVSS 6.6 Medium · Not analysed yet · Published 2 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path in Acronis Cyber Protect 16](https://agentprime.io/advisories/CVE-2024-55543.md) `CVE-2024-55543` · CVE record: Acronis Acronis Cyber Protect 16 · CVSS 7.3 High · Not analysed yet · Published 2 Jan 2025 · Tags: CWE-427 - [Uncontrolled search path in Trend Micro, Inc. Trend Micro Deep Security](https://agentprime.io/advisories/CVE-2024-55955.md) `CVE-2024-55955` · CVE record: Trend Micro, Inc. Trend Micro Deep Security · CVSS 6.7 Medium · Not analysed yet · Published 31 Dec 2024 · Tags: CWE-427 - [QVPN Device Client](https://agentprime.io/advisories/CVE-2022-27595.md) `CVE-2022-27595` · CVE record: QNAP Systems Inc. QVPN Windows · CVSS 7.8 High · Not analysed yet · Published 19 Dec 2024 · Tags: CWE-427 - [DLL Hijacking vulnerability in SAP Product Lifecycle Costing](https://agentprime.io/advisories/CVE-2024-47576.md) `CVE-2024-47576` · CVE record: SAP_SE SAP Product Lifecycle Costing · CVSS 3.3 Low · Not analysed yet · Published 10 Dec 2024 · Tags: CWE-427 - [Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32](https://agentprime.io/advisories/CVE-2024-9852.md) `CVE-2024-9852` · CVE record: Mitsubishi Electric Corporation GENESIS64 and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Nov 2024 · Tags: CWE-427 - [Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32](https://agentprime.io/advisories/CVE-2024-8299.md) `CVE-2024-8299` · CVE record: Mitsubishi Electric Corporation GENESIS64 and 4 more · CVSS 7.8 High · Not analysed yet · Published 28 Nov 2024 · Tags: CWE-427 - [NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-7253.md) `CVE-2024-7253` · CVE record: NoMachine NoMachine · CVSS 7.8 High · Not analysed yet · Published 22 Nov 2024 · Tags: CWE-427 - [Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-7244.md) `CVE-2024-7244` · CVE record: Panda Security Dome · CVSS 7.8 High · Not analysed yet · Published 22 Nov 2024 · Tags: CWE-427 - [Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-30376.md) `CVE-2024-30376` · CVE record: Famatech Advanced IP Scanner · CVSS 7.3 High · Not analysed yet · Published 22 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in needrestart](https://agentprime.io/advisories/CVE-2024-48992.md) `CVE-2024-48992` · CVE record: needrestart needrestart · CVSS 7.8 High · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in needrestart](https://agentprime.io/advisories/CVE-2024-48990.md) `CVE-2024-48990` · CVE record: needrestart needrestart · CVSS 7.8 High · Critical (CVSS 7+ and EPSS) · EPSS 0.29 · Not analysed yet · Published 19 Nov 2024 · Tags: CWE-427 - [Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element.](https://agentprime.io/advisories/CVE-2024-49592.md) `CVE-2024-49592` · CVE record · CVSS 6.7 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler](https://agentprime.io/advisories/CVE-2024-34165.md) `CVE-2024-34165` · CVE record: Intel(R) oneAPI DPC++/C++ Compiler · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Pro Edition software for Windows](https://agentprime.io/advisories/CVE-2024-38383.md) `CVE-2024-38383` · CVE record: Intel(R) Quartus(R) Prime Pro Edition software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Quartus(R) Prime Standard Edition software for Windows](https://agentprime.io/advisories/CVE-2024-38668.md) `CVE-2024-38668` · CVE record: Intel(R) Quartus(R) Prime Standard Edition software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Graphics Driver installers](https://agentprime.io/advisories/CVE-2024-38387.md) `CVE-2024-38387` · CVE record: Intel(R) Graphics Driver installers · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) VTune(TM) Profiler software](https://agentprime.io/advisories/CVE-2024-36245.md) `CVE-2024-36245` · CVE record: Intel(R) VTune(TM) Profiler software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Server Board S2600ST Family BIOS and Firmware Update software](https://agentprime.io/advisories/CVE-2024-34167.md) `CVE-2024-34167` · CVE record: Intel(R) Server Board S2600ST Family BIOS and Firmware Update software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) SDP Tool for Windows software](https://agentprime.io/advisories/CVE-2024-36253.md) `CVE-2024-36253` · CVE record: Intel(R) SDP Tool for Windows software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in ACAT software maintained by Intel(R) for Windows](https://agentprime.io/advisories/CVE-2024-37024.md) `CVE-2024-37024` · CVE record: ACAT software maintained by Intel(R) for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Fortran Compiler Classic software](https://agentprime.io/advisories/CVE-2024-28881.md) `CVE-2024-28881` · CVE record: Intel(R) Fortran Compiler Classic software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) PROSet/Wireless WiFi software for Windows](https://agentprime.io/advisories/CVE-2024-35245.md) `CVE-2024-35245` · CVE record: Intel(R) PROSet/Wireless WiFi software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows](https://agentprime.io/advisories/CVE-2024-34028.md) `CVE-2024-34028` · CVE record: Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) MAS software](https://agentprime.io/advisories/CVE-2024-34164.md) `CVE-2024-34164` · CVE record: Intel(R) MAS software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) oneAPI Math Kernel Library software for Windows](https://agentprime.io/advisories/CVE-2024-28950.md) `CVE-2024-28950` · CVE record: Intel(R) oneAPI Math Kernel Library software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime…](https://agentprime.io/advisories/CVE-2024-31407.md) `CVE-2024-31407` · CVE record: Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Rendering Toolkit software](https://agentprime.io/advisories/CVE-2024-26017.md) `CVE-2024-26017` · CVE record: Intel(R) Rendering Toolkit software · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) IPP software for Windows](https://agentprime.io/advisories/CVE-2024-28952.md) `CVE-2024-28952` · CVE record: Intel(R) IPP software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Intel(R) Binary Configuration Tool software for Windows](https://agentprime.io/advisories/CVE-2024-23312.md) `CVE-2024-23312` · CVE record: Intel(R) Binary Configuration Tool software for Windows · CVSS 5.4 Medium · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-427 - [Sound Research SECOMN64 Escalation of Privilege](https://agentprime.io/advisories/CVE-2024-2208.md) `CVE-2024-2208` · CVE record: Sound Research SECOMN64 Driver · CVSS 8.8 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-427 - [Sound Research SECOMN64 Escalation of Privilege](https://agentprime.io/advisories/CVE-2024-2207.md) `CVE-2024-2207` · CVE record: Sound Research SECOMN64 Driver · CVSS 6.0 Medium · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Siemens Solid Edge SE2024](https://agentprime.io/advisories/CVE-2024-47942.md) `CVE-2024-47942` · CVE record: Siemens Solid Edge SE2024 · CVSS 7.0 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-427 - [Safearchive Path Traversal vulnerability in github.com/google/safearchive](https://agentprime.io/advisories/GHSA-q3rp-vvm7-j8jg.md) `GHSA-q3rp-vvm7-j8jg`, `CVE-2024-10389`, `GO-2024-3251` · Go `github.com/google/safearchive`: affected `<0.0.0-20241025131057-f7ce9d7b6f9c`, fixed in `0.0.0-20241025131057-f7ce9d7b6f9c` · CVSS 5.9 Medium · Not analysed yet · Published 6 Nov 2024 · Tags: CWE-427 - [Uncontrolled search path in Naver Whale browser Installer](https://agentprime.io/advisories/CVE-2024-50583.md) `CVE-2024-50583` · CVE record: NAVER Naver Whale browser Installer · CVSS 6.3 Medium · Not analysed yet · Published 25 Oct 2024 · Tags: CWE-427 - [An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file.](https://agentprime.io/advisories/CVE-2024-48605.md) `CVE-2024-48605` · CVE record · CVSS 7.8 High · Not analysed yet · Published 22 Oct 2024 · Tags: CWE-427 - [VSO ConvertXtoDvd ConvertXtoDvd.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2024-10093.md) `CVE-2024-10093` · CVE record: VSO ConvertXtoDvd · CVSS 8.5 High · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-427 - [OpenSight Software FlashFXP FlashFXP.exe uncontrolled search path](https://agentprime.io/advisories/CVE-2024-10068.md) `CVE-2024-10068` · CVE record: OpenSight Software FlashFXP · CVSS 8.5 High · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-427 - [Uncontrolled search path in Acronis Cyber Files](https://agentprime.io/advisories/CVE-2024-49390.md) `CVE-2024-49390` · CVE record: Acronis Acronis Cyber Files · CVSS 7.3 High · Not analysed yet · Published 17 Oct 2024 · Tags: CWE-427 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .