# CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

## Records, newest first (an older page)

- [LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows](https://agentprime.io/advisories/CVE-2026-9169.md)
  `CVE-2026-9169` · CVE record: LUCID Vision Labs Arena SDK · CVSS 8.8 High · Not analysed yet · Published 7 Aug 2026 · Tags: CWE-427
- [Uncontrolled search path in Integrated Systems Technologies, Inc. NetKids iMark](https://agentprime.io/advisories/CVE-2026-66344.md)
  `CVE-2026-66344` · CVE record: Integrated Systems Technologies, Inc. NetKids iMark · CVSS 5.4 Medium · Not analysed yet · Published 5 Aug 2026 · Tags: CWE-427
- [Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows](https://agentprime.io/advisories/CVE-2026-18657.md)
  `CVE-2026-18657` · CVE record: Amazon Kiro CLI · CVSS 8.5 High · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-427
- [Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows](https://agentprime.io/advisories/CVE-2026-18656.md)
  `CVE-2026-18656` · CVE record: Amazon Kiro IDE · CVSS 8.5 High · Not analysed yet · Published 4 Aug 2026 · Tags: CWE-427
- [Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State](https://agentprime.io/advisories/CVE-2026-18718.md)
  `CVE-2026-18718` · CVE record: National Security Agency Ghidra · CVSS 7.1 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-427
- [CheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sys uncontrolled search path](https://agentprime.io/advisories/CVE-2026-18605.md)
  `CVE-2026-18605` · CVE record: CheckMAL AppCheck Pro · CVSS 7.3 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-426, CWE-427
- [iDTM FDI Unauthorized Debug Interface Enablement](https://agentprime.io/advisories/CVE-2026-9593.md)
  `CVE-2026-9593` · CVE record: Endress+Hauser FDI Package library · CVSS 8.4 High · Not analysed yet · Published 3 Aug 2026 · Tags: CWE-427
- [Photoshop Installer | CWE-427: Uncontrolled Search Path Element](https://agentprime.io/advisories/CVE-2026-48388.md)
  `CVE-2026-48388` · CVE record: Adobe Adobe Photoshop Installer · CVSS 8.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-427
- [Search Order Hijacking in ArkSigner's ArkSigner Desktop Client](https://agentprime.io/advisories/CVE-2026-8164.md)
  `CVE-2026-8164` · CVE record: ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client · CVSS 7.3 High · Not analysed yet · Published 28 Jul 2026 · Tags: CWE-427
- [electron-updater: Uncontrolled search path elements within \`AppImage\` built by \`app-builder-lib\`](https://agentprime.io/advisories/GHSA-7g7r-gx96-252g.md)
  `GHSA-7g7r-gx96-252g`, `CVE-2026-54672` · npm `app-builder-lib`: affected `<26.15.0`, fixed in `26.15.0` · CVSS 7.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-427
- [GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability](https://agentprime.io/advisories/CVE-2026-16519.md)
  `CVE-2026-16519` · CVE record: GeoVision Inc. GV-IP Device Utility · CVSS 7.3 High · Not analysed yet · Published 24 Jul 2026 · Tags: CWE-427
- [HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking](https://agentprime.io/advisories/CVE-2026-21770.md)
  `CVE-2026-21770` · CVE record: HCLSoftware HCL Traveler for Microsoft Outlook (HTMO) · CVSS 6.5 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: CWE-427
- [Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading](https://agentprime.io/advisories/CVE-2026-5674.md)
  `CVE-2026-5674` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 8.8 High · Not analysed yet · Published 16 Jul 2026 · Tags: CWE-427
- [Uncontrolled search path in SBI SECURITIES Co.,Ltd. HYPER SBI 2](https://agentprime.io/advisories/CVE-2026-42936.md)
  `CVE-2026-42936` · CVE record: SBI SECURITIES Co.,Ltd. HYPER SBI 2 · CVSS 8.4 High · Not analysed yet · Published 15 Jul 2026 · Tags: CWE-427
- [Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-48272.md)
  `CVE-2026-48272` · CVE record: Adobe Creative Cloud Desktop · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-427
- [DLL Hijacking vulnerability in SAProuter on Microsoft Windows](https://agentprime.io/advisories/CVE-2026-0487.md)
  `CVE-2026-0487` · CVE record: SAP_SE SAProuter on Microsoft Windows · CVSS 8.4 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-427
- [ColdFusion | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-48363.md)
  `CVE-2026-48363` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 8.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-427
- [ColdFusion | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-48364.md)
  `CVE-2026-48364` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 8.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-427
- [Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path](https://agentprime.io/advisories/CVE-2026-15515.md)
  `CVE-2026-15515` · CVE record: Tencent PC Manager · CVSS 7.3 High · Not analysed yet · Published 13 Jul 2026 · Tags: CWE-426, CWE-427
- [Uncontrolled search path in Fuji Electric Co.,Ltd. Pupsman](https://agentprime.io/advisories/CVE-2026-56437.md)
  `CVE-2026-56437` · CVE record: Fuji Electric Co.,Ltd. Pupsman · CVSS 8.4 High · Not analysed yet · Published 8 Jul 2026 · Tags: CWE-427
- [OpenClaw: Fake package roots could influence memory-core artifact loading](https://agentprime.io/advisories/GHSA-v8cx-933x-r976.md)
  `GHSA-v8cx-933x-r976`, `CVE-2026-53813` · npm `openclaw`: affected `<2026.4.25`, fixed in `2026.4.25` · CVSS 7.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-427
- [Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c.](https://agentprime.io/advisories/CVE-2026-38972.md)
  `CVE-2026-38972` · CVE record · CVSS 7.8 High · Not analysed yet · Published 2 Jul 2026 · Tags: CWE-427
- [Advant Master Online Builder DLL vulnerability](https://agentprime.io/advisories/CVE-2025-13162.md)
  `CVE-2025-13162` · CVE record: ABB Control Builder A and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-427
- [vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache packag...](https://agentprime.io/advisories/GHSA-jrf6-vqxq-pjv2.md)
  `GHSA-jrf6-vqxq-pjv2`, `CVE-2026-54232`, `PYSEC-2026-227` · PyPI `vllm`: affected `<0.22.1`, fixed in `0.22.1` · CVSS 8.8 High · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-427
- [Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension](https://agentprime.io/advisories/CVE-2026-49241.md)
  `CVE-2026-49241` · CVE record: angular angular · CVSS 8.7 High · Not analysed yet · Published 22 Jun 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-427, CWE-494
- [Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows](https://agentprime.io/advisories/CVE-2026-6645.md)
  `CVE-2026-6645` · CVE record: PaperCut Print Deploy · CVSS 7.3 High · Not analysed yet · Published 22 Jun 2026 · Tags: CWE-427
- [Local privilege escalation in ANSSI’s DFIR-ORC](https://agentprime.io/advisories/CVE-2026-11958.md)
  `CVE-2026-11958` · CVE record: ANSSI DFIR-ORC · CVSS 7.3 High · Not analysed yet · Published 18 Jun 2026 · Tags: CWE-427
- [CPython >3.11 Insecure Input Validation resulting in privilege escalation](https://agentprime.io/advisories/CVE-2026-12003.md)
  `CVE-2026-12003` · CVE record: Python Software Foundation CPython · CVSS 5.3 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Dell Peripheral Manager](https://agentprime.io/advisories/CVE-2024-22451.md)
  `CVE-2024-22451` · CVE record: Dell Peripheral Manager · CVSS 6.7 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Dell Peripheral Manager](https://agentprime.io/advisories/CVE-2024-22447.md)
  `CVE-2024-22447` · CVE record: Dell Peripheral Manager · CVSS 6.7 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: CWE-427
- [HP One Agent Software – Security Update](https://agentprime.io/advisories/CVE-2026-5064.md)
  `CVE-2026-5064` · CVE record: HP Inc. HP One Agent Software · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Ricoh Company, Ltd. Multiple printer drivers and others](https://agentprime.io/advisories/CVE-2026-50100.md)
  `CVE-2026-50100` · CVE record: Ricoh Company, Ltd. Multiple printer drivers and 1 more · CVSS 8.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: CWE-427
- [Arbitrary code execution in MobaXterm Personal Edition (Portable)](https://agentprime.io/advisories/CVE-2026-11967.md)
  `CVE-2026-11967` · CVE record: Mobatek MobaXterm Personal Edition (Portable) · CVSS 8.5 High · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-427
- [Arbitrary code execution in MobaXterm Personal Edition (Portable)](https://agentprime.io/advisories/CVE-2026-11879.md)
  `CVE-2026-11879` · CVE record: Mobatek MobaXterm Personal Edition (Portable) · CVSS 8.5 High · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-427
- [IBM i is Affected by Privilege Escalation \[\]](https://agentprime.io/advisories/CVE-2026-7870.md)
  `CVE-2026-7870` · CVE record: IBM i · CVSS 8.8 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-427
- [Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS](https://agentprime.io/advisories/CVE-2026-10847.md)
  `CVE-2026-10847` · CVE record: checkpoint Identity Agent · CVSS 7.8 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Lenovo LanSchool Classic](https://agentprime.io/advisories/CVE-2026-8637.md)
  `CVE-2026-8637` · CVE record: Lenovo LanSchool Classic · CVSS 8.5 High · Not analysed yet · Published 10 Jun 2026 · Tags: CWE-427
- [Acrobat Reader | Uncontrolled Search Path Element (CWE-427)](https://agentprime.io/advisories/CVE-2026-47937.md)
  `CVE-2026-47937` · CVE record: Adobe Acrobat DC and 2 more · CVSS 7.7 High · Not analysed yet · Published 9 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Acronis DeviceLock DLP](https://agentprime.io/advisories/CVE-2026-44682.md)
  `CVE-2026-44682` · CVE record: Acronis Acronis DeviceLock DLP · CVSS 7.3 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Acronis DeviceLock DLP](https://agentprime.io/advisories/CVE-2026-50033.md)
  `CVE-2026-50033` · CVE record: Acronis Acronis DeviceLock DLP · CVSS 7.3 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-427
- [Uncontrolled search path in Acronis DeviceLock DLP](https://agentprime.io/advisories/CVE-2026-44609.md)
  `CVE-2026-44609` · CVE record: Acronis Acronis DeviceLock DLP · CVSS 7.3 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-427
- [A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.](https://agentprime.io/advisories/CVE-2026-36574.md)
  `CVE-2026-36574` · CVE record · CVSS 7.8 High · Not analysed yet · Published 3 Jun 2026 · Tags: CWE-427
- [Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint](https://agentprime.io/advisories/CVE-2026-44358.md)
  `CVE-2026-44358` · CVE record: espressif shared-github-dangerjs · CVSS 8.2 High · Not analysed yet · Published 28 May 2026 · Tags: CWE-427, CWE-829
- [pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation](https://agentprime.io/advisories/CVE-2026-47274.md)
  `CVE-2026-47274` · CVE record: mcdope pam_usb · CVSS 6.3 Medium · Not analysed yet · Published 27 May 2026 · Tags: CWE-427
- [Uncontrolled search path in Synology BeeDrive for desktop](https://agentprime.io/advisories/CVE-2023-52945.md)
  `CVE-2023-52945` · CVE record: Synology BeeDrive for desktop · CVSS 7.8 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-427
- [Untrusted Search Path](https://agentprime.io/advisories/CVE-2025-41670.md)
  `CVE-2025-41670` · CVE record: Phoenix Contact AXC F 1152 and 4 more · CVSS 8.7 High · Not analysed yet · Published 27 May 2026 · Tags: CWE-427
- [Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading](https://agentprime.io/advisories/CVE-2025-14575.md)
  `CVE-2025-14575` · CVE record: Qt Qt · CVSS 1.8 Low · Not analysed yet · Published 19 May 2026 · Tags: CWE-427
- [Mullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installer](https://agentprime.io/advisories/CVE-2026-32323.md)
  `CVE-2026-32323` · CVE record: mullvad mullvadvpn-app · CVSS 7.3 High · Not analysed yet · Published 19 May 2026 · Tags: Privilege escalation, CWE-345, CWE-427
- [Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable](https://agentprime.io/advisories/CVE-2026-47092.md)
  `CVE-2026-47092` · CVE record: jarrodwatts claude-hud · CVSS 7.3 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-427
- [Docker: \`PUT /containers/{id}/archive\` executes container binary on the host](https://agentprime.io/advisories/GHSA-x86f-5xw2-fm2r.md)
  `GHSA-x86f-5xw2-fm2r`, `CVE-2026-41567`, `GO-2026-5746` · Go `github.com/docker/docker` and 2 more: affected `<=28.5.2`, no fixed version yet · CVSS 7.2 High · Not analysed yet · Published 18 May 2026 · Tags: CWE-427
- [Uncontrolled search path in AMD Radeon™ RX 5000 Series Graphics Products and others](https://agentprime.io/advisories/CVE-2024-36333.md)
  `CVE-2024-36333` · CVE record: AMD AMD Radeon™ RX 5000 Series Graphics Products and 4 more · CVSS 7.0 High · Not analysed yet · Published 15 May 2026 · Tags: CWE-427
- [Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading](https://agentprime.io/advisories/CVE-2026-7373.md)
  `CVE-2026-7373` · CVE record: Rapid7 Metasploit Pro · CVSS 8.5 High · Not analysed yet · Published 15 May 2026 · Tags: Broken access control, CWE-427, CWE-829
- [Uncontrolled search path in AMD AIM-T Manageability Service and others](https://agentprime.io/advisories/CVE-2025-62628.md)
  `CVE-2025-62628` · CVE record: AMD AIM-T Manageability Service and 4 more · CVSS 7.0 High · Not analysed yet · Published 14 May 2026 · Tags: CWE-427
- [Privilege escalation via mk_mysql agent plugin on Windows](https://agentprime.io/advisories/CVE-2024-47091.md)
  `CVE-2024-47091` · CVE record: Checkmk GmbH Checkmk · CVSS 5.2 Medium · Not analysed yet · Published 13 May 2026 · Tags: CWE-427
- [Uncontrolled search path in Bytello Share (Windows Edition) installer executable](https://agentprime.io/advisories/CVE-2026-44612.md)
  `CVE-2026-44612` · CVE record: Bytello Bytello Share (Windows Edition) installer executable · CVSS 8.4 High · Not analysed yet · Published 13 May 2026 · Tags: CWE-427
- [Uncontrolled search path in AI Playground software](https://agentprime.io/advisories/CVE-2025-36515.md)
  `CVE-2025-36515` · CVE record: AI Playground software · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Server Firmware Update Utility Software](https://agentprime.io/advisories/CVE-2025-35969.md)
  `CVE-2025-35969` · CVE record: Intel(R) Server Firmware Update Utility Software · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-427
- [Uncontrolled search path in Intel(R) Connectivity Performance Suite software installers](https://agentprime.io/advisories/CVE-2026-20772.md)
  `CVE-2026-20772` · CVE record: Intel(R) Connectivity Performance Suite software installers · CVSS 5.4 Medium · Not analysed yet · Published 12 May 2026 · Tags: CWE-427
- [Duplicate Advisory: OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution](https://agentprime.io/advisories/GHSA-xpr6-2hgm-4wwp.md)
  `GHSA-xpr6-2hgm-4wwp` · npm `openclaw`: affected `<2026.4.23`, fixed in `2026.4.23` · CVSS 7.8 High · Withdrawn · Not analysed yet · Published 11 May 2026 · Tags: CWE-427
- [RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable.](https://agentprime.io/advisories/CVE-2025-69599.md)
  `CVE-2025-69599` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: CWE-427

Newest: <https://agentprime.io/advisories/tag/cwe-427.md>
Older: <https://agentprime.io/advisories/tag/cwe-427.md?cursor=WyIyMDI2LTA1LTA4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNS02OTU5OSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-427&cursor=WyIyMDI2LTA4LTEwVDA2OjAwOjEyLjAyMDAwMFoiLCJDVkUtMjAyNi0xMzEzMyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-427/?cursor=WyIyMDI2LTA4LTEwVDA2OjAwOjEyLjAyMDAwMFoiLCJDVkUtMjAyNi0xMzEzMyJd>. Everything for agents: <https://agentprime.io/llms.txt>.