CWE-427.

Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

• mistralai mistral-vibe
• CWE-427

Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

• Apache Software Foundation Apache OpenOffice
• CWE-427

Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable

• anthropics claude-code
• CWE-427

SolarWinds Dameware DLL Hijacking Vulnerability

• SolarWinds Dameware
• CWE-427

pgAdmin 4: Utility binary path can point at a shared storage directory

• pgadmin.org pgAdmin 4
• CWE-426
• CWE-427

Uncontrolled search path in Yamaha Corporation Yamaha LAN Monitor for Windows

• Yamaha Corporation Yamaha LAN Monitor for Windows
• CWE-427

CVE-2026-118131

• GnuPG
• Broken access control
• CWE-379

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

• Adobe Creative Cloud Desktop Application
• CWE-427

An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic

• CWE-427

HP One Agent Software – Security Update

• HP Inc. HP One Agent Software
• CWE-427

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

• Luxion KeyShot
• CWE-427

Uncontrolled search path in ASUS Armoury Crate and others

• ASUS Armoury Crate
• ASUS Armoury Crate SE
• CWE-427

Uncontrolled search path in Dell Application Store

• Dell Application Store
• CWE-427

Uncontrolled search path in Siemens Software Center

• Siemens Software Center
• CWE-427

Metalama allows local code execution through DLL planting in shared temporary directories

• CWE-377
• CWE-427

<2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19 · fixed in 2025.1.18, 2026.0.25, 2026.1.19

HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking

• hestiacp
• Command injection
• Code injection

Dimension | Uncontrolled Search Path Element (CWE-427)

• Adobe Dimension
• CWE-427

Windows AI Elevation of Privilege Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• CWE-427

ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate

• ImageMagick
• CWE-427

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

• Code injection
• CWE-427

<1.6.78 · fixed in 1.6.78

DLL search order hijacking via screenhooks libraries in TightVNC Server

• GlavSoft TightVNC
• CWE-427

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

• Command injection
• Code injection

<0.30.0 · fixed in 0.30.0

Uncontrolled search path in Google Chrome

• Google Chrome
• CWE-427

Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

• Mitel MiVoice Office 400
• Path traversal
• CWE-426

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

• Code injection
• CWE-427

<3.1.60 · fixed in 3.1.60

Uncontrolled search path in NVIDIA GeForce and others

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-427

Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

• Rapid7 Insight Agent
• CWE-427

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• CWE-427

Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

• Foxit Software Inc. Foxit PDF Editor
• Foxit Software Inc. Foxit PDF Reader
• CWE-427

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

• netdata
• Privilege escalation
• CWE-427

Uncontrolled Search Path Element in Qualcomm Software Center

• Qualcomm, Inc. Snapdragon
• CWE-427

NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

• netbox-community devicetype-library
• CWE-427
• CWE-829

Uncontrolled search path in Dell Driver Pack For Windows OS and others

• Dell Driver Pack For Windows OS
• Dell Driver Pack For Linux OS
• CWE-427

GeoVision GV-Remote E-Map dll hijacking vulnerability

• GeoVision Inc. GV-Remote E-map
• CWE-427

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• pdfforge PDF Architect
• CWE-427

Uncontrolled search path in Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows…

• Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows version)
• CWE-427

Uncontrolled search path in Google Chrome

• Google Chrome
• CWE-427

Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

• Adobe Photoshop 2026
• Adobe Photoshop 2025
• CWE-427

Windows Hello Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-427

Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe

• Invicti Security Corp. Acunetix
• CWE-427

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

• CWE-426
• CWE-427

<3.10.3 · fixed in 3.10.3

Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

• EASYBYTE Software Konga
• CWE-427

Uncontrolled search path in OpenAI Codex Desktop and others

• OpenAI Codex Desktop
• OpenAI Codex Desktop (Microsoft Store package)
• CWE-427

SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

• siyuan
• CWE-427

Uncontrolled search path in NVIDIA OpenShell

• NVIDIA OpenShell
• CWE-427

Windows Remote Help Defense Spoofing Vulnerability

• Microsoft Windows Remote Help
• CWE-427

Microsoft Remote Help Denial of Service Vulnerability

• Microsoft Windows Remote Help
• CWE-427

Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.

• Zabbix
• CWE-427

Uncontrolled search path in Dell ObjectScale

• Dell ObjectScale
• CWE-427

An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file.

• CWE-427

Prisma Access Agent: Local Privilege Escalation

• Palo Alto Networks Prisma Access Agent
• CWE-427

IBM i is Affected By Remote Code Execution Vulnerability []

• i
• CWE-427

Uncontrolled search path in AMD Ryzen™ Master and others

• AMD Ryzen™ Master
• AMD Ryzen™ Master (AMD Ryzen™ 3000 Series Processors)
• CWE-427

Uncontrolled search path in AMD Power Design Manager (PDM) Software Un-Installer

• AMD Power Design Manager (PDM) Software Un-Installer
• CWE-427

Uncontrolled search path in AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows

• AMD Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows
• CWE-427

Uncontrolled search path in AMD Vitis™ Embedded Single File Download (SFD) for Windows

• AMD Vitis™ Embedded Single File Download (SFD) for Windows
• CWE-427

Uncontrolled search path in Hardware-Aware-Automated-MachineLearning NA

• Hardware-Aware-Automated-MachineLearning NA
• CWE-427

Uncontrolled search path in Approximate Bayesian Inference Framework

• Approximate Bayesian Inference Framework
• CWE-427

Uncontrolled search path in EquiTriton

• EquiTriton
• CWE-427

Uncontrolled search path in LY Corporation LINE for Windows

• LY Corporation LINE for Windows
• CWE-427