Advisories · Weakness
CWE-427.
Every Advisory and CVE whose sources give the weakness CWE-427, newest first.
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler software
- Intel(R) oneAPI DPC++/C++ Compiler software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Arc™ & Iris(R) Xe graphics software
- Intel(R) Arc™ & Iris(R) Xe graphics software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) QAT software
- Intel(R) QAT software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) oneAPI Level Zero software
- Intel(R) oneAPI Level Zero software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Graphics software
- Intel(R) Graphics software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Network Adapter Driver installers for Windows 11
- Intel(R) Network Adapter Driver installers for Windows 11
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Advisor software
- Intel(R) Advisor software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) RealSense™ SDK software
- Intel(R) RealSense™ SDK software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe…
- Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Ethernet Connection software
- Intel(R) Ethernet Connection software
- CWE-427
- CVSS 7.8 High
Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
- Adobe Substance3D - Modeler
- CWE-427
- CVSS 5.2 Medium
Privilege escalation in jar_signature
- Checkmk
- CWE-427
- CVSS 7.0 High
conda-forge openssl-feedstock writable OPENSSLDIR
- conda-forge openssl-feedstock
- conda-forge miniforge
- CWE-427
- CVSS 7.3 High
Hainan ToDesk DLL File Parser profapi.dll uncontrolled search path
- Hainan ToDesk
- CWE-426
- CWE-427
- CVSS 7.3 High
Shanghai Bairui Information Technology SunloginClient sunlogin_guard.exe uncontrolled search path
- Shanghai Bairui Information Technology SunloginClient
- CWE-426
- CWE-427
- CVSS 7.3 High
Discord WINSTA.dll uncontrolled search path
- Discord
- CWE-426
- CWE-427
- CVSS 7.3 High
Patch My PC Home Updater System.IO uncontrolled search path
- Patch My PC Home Updater
- CWE-426
- CWE-427
- CVSS 7.3 High
Mechrevo Control Console GCUService csCAPI.dll uncontrolled search path
- Mechrevo Control Console
- CWE-426
- CWE-427
- CVSS 7.6 High
Ribbon Communications - CWE-427: Uncontrolled Search Path Element
- Ribbon Communications Apollo 9608
- CWE-427
- CVSS 7.8 High
Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- Bdrive NetDrive
- CWE-427
- CVSS 7.8 High
Bdrive NetDrive Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- Bdrive NetDrive
- CWE-427
- CVSS 7.8 High
DPMAdirektPro 4.1.5 is vulnerable to DLL Hijacking.
- CWE-427
- CVSS 7.0 High
Insecure Dynamic-Link Library (DLL) Load vulnerability
- OpenText Secure Content Manager
- CWE-427
- CVSS 7.3 High
BleachBit for Windows Has DLL Untrusted Path Vulnerability
- bleachbit
- CWE-427
- CVSS 5.7 Medium
Microsoft Power Automate Desktop Information Disclosure Vulnerability
- Microsoft Power Automate for Desktop
- CWE-427
- CVSS 7.3 High
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
- Microsoft SQL Server Management Studio 20.2
- Microsoft Visual Studio Tools for Applications (VSTA)
- CWE-427
- CVSS 7.0 High
DLL Hijacking Vulnerability in NI LabVIEW
- NI LabVIEW
- CWE-427
- CVSS 7.0 High
DLL Hijacking Vulnerability in NI LabVIEW When Loading NI Error Reporting
- NI LabVIEW
- CWE-427
- CVSS 7.3 High
Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2022 version 17.10
- Microsoft Visual Studio 2022 version 17.12
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in Ivanti Endpoint Manager
- Ivanti Endpoint Manager
- CWE-427
- CVSS 8.4 High
DLL Search Order Hijacking in ESET products for Windows
- ESET, spol. s r.o. ESET NOD32 Antivirus
- ESET, spol. s r.o. ESET Internet Security
- CWE-427
- CVSS 6.5 Medium
Linux::Statm::Tiny for Perl allows untrusted code to be included from the current working directory
- RRWO Linux::Statm::Tiny
- CWE-427
- CVSS 6.5 Medium
Sub::HandlesVia for Perl allows untrusted code to be included from the current working directory
- TOBYINK Sub::HandlesVia
- CWE-427
- CVSS 6.5 Medium
Mite for Perl generates code with an untrusted search path vulnerability
- TOBYINK Mite
- CWE-427
- CVSS 7.3 High
Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- CWE-427
- CVSS 7.3 High
Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- Microsoft Visual Studio 2022 version 17.10
- CWE-427
- CVSS 7.3 High
Visual Studio Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-427
- CVSS 7.1 High
Carrier Block Load Privilege Escalation
- Carrier Block Load
- CWE-427
- CVSS 7.8 High
Wondershare filmora 9.2.11 is affected by Trojan Dll hijacking leading to privilege escalation.
- CWE-427
- CVSS 7.3 High
Blizzard Battle.Net profapi.dll uncontrolled search path
- Blizzard Battle.Net
- CWE-426
- CWE-427
- CVSS 8.5 High
IBM i privilege escalation
- i
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Trend Micro, Inc. Trend Micro HouseCall for Home Networks
- Trend Micro, Inc. Trend Micro HouseCall for Home Networks
- CWE-427
- CVSS 5.8 Medium
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
- Citrix Secure Access Client for Mac
- CWE-427
- CVSS 6.8 Medium
Local Privilege Escalation in Rufus 4.6 and previous versions
- pbatard rufus
- CWE-426
- CWE-427
- CVSS 7.3 High
Insecure Loading of Dynamic Link Libraries in HVAC Energy Saving Program
- Hitachi HVAC Energy Saving Program
- CWE-427
- CVSS 7.3 High
Insecure Loading of Dynamic Link Libraries in USB-CONVERTERCABLE DRIVER
- Hitachi USB-CONVERTERCABLE DRIVER
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler software for Windows
- Intel(R) oneAPI DPC++/C++ Compiler software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Quartus(R) Prime Software
- Intel(R) Quartus(R) Prime Software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Thread Director Visualizer software
- Intel(R) Thread Director Visualizer software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) RealSense D400 Series
- Intel(R) RealSense D400 Series
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) High Level Synthesis Compiler software
- Intel(R) High Level Synthesis Compiler software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) XTU software for Windows
- Intel(R) XTU software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Ethernet Adapter Complete Driver Pack
- Intel(R) Ethernet Adapter Complete Driver Pack
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Chipset Software Installation Utility
- Intel(R) Chipset Software Installation Utility
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) MPI Library for Windows software
- Intel(R) MPI Library for Windows software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Advisor software
- Intel(R) Advisor software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in EPCT software
- EPCT software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in BIOS and System Firmware Update Package for Intel(R) Server M50FCP family
- BIOS and System Firmware Update Package for Intel(R) Server M50FCP family
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) VPL software
- Intel(R) VPL software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) QuickAssist Technology software
- Intel(R) QuickAssist Technology software
- CWE-427