CWE-427.

Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code.

• CWE-427

Uncontrolled search path in Salesforce CLI

• Salesforce CLI
• CWE-427

Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

• Asterisk
• CWE-427

A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple DLLs.

• CWE-427

Uncontrolled search path in Lenovo Browser

• Lenovo Browser
• CWE-427

Elevation of Privileges Vulnerability in IT Management Suite

• Broadcom 8.6.IT Management Suite
• Privilege escalation
• CWE-427

DLL search path hijacking vulnerability

• UPDF
• CWE-427

DLL search path hijacking vulnerability

• UPDF
• CWE-427

DLL search path hijacking vulnerability

• UPDF
• CWE-427

DLL search order hijack in Wave by Grandstream Networks

• Grandstream Networks Wave
• CWE-427

LizardBytes Sunshine for Windows contains a DLL search-order hijacking vulnerability

• LizardByte Sunshine for Windows
• CWE-427

TkEasyGUI Affected by Uncontrolled Search Path Element Issue

• CWE-427

<1.0.22 · fixed in 1.0.22

Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• Foxit PDF Reader
• CWE-427

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• NoMachine
• CWE-427

Mechrevo Control Center GX V2 Powershell Script Command uncontrolled search path

• Mechrevo Control Center GX V2
• CWE-426
• CWE-427

Mechrevo Control Center GX V2 reg File uncontrolled search path

• Mechrevo Control Center GX V2
• CWE-426
• CWE-427

Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

• Adobe Substance3D - Modeler
• CWE-427

Uncontrolled search path in Intel(R) Graphics Driver software

• Intel(R) Graphics Driver software
• CWE-427

Uncontrolled search path in Intel(R) DSA software

• Intel(R) DSA software
• CWE-427

Uncontrolled search path in Intel(R) AI for Enterprise Retrieval-augmented Generation software

• Intel(R) AI for Enterprise Retrieval-augmented Generation software
• CWE-427

Uncontrolled search path in Intel(R) RealSense(TM) Dynamic Calibrator software

• Intel(R) RealSense(TM) Dynamic Calibrator software
• CWE-427

Uncontrolled search path in Intel(R) Driver &amp; Support Assistant Tool software

• Intel(R) Driver &amp; Support Assistant Tool software
• CWE-427

Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler software

• Intel(R) oneAPI DPC++/C++ Compiler software
• CWE-427

Uncontrolled search path in Clock Jitter Tool software

• Clock Jitter Tool software
• CWE-427

Uncontrolled search path in Intel(R) Trace Analyzer and Collector software

• Intel(R) Trace Analyzer and Collector software
• CWE-427

Uncontrolled search path in Intel(R) oneAPI Toolkit and component software installers

• Intel(R) oneAPI Toolkit and component software installers
• CWE-427

Uncontrolled search path in Siemens Automation License Manager V6.0 and others

• Siemens Automation License Manager V6.0
• Siemens Automation License Manager V6.2
• CWE-427

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the…

• CWE-427

Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup file and a renamed executable placed in th…

• CWE-427

Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

• Elastic Beats
• CWE-427

APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer

• Elastic APM Server
• CWE-427

Mattermost allows authenticated users to write files to arbitrary locations in github.com/mattermost/mattermost-server

• CWE-427

<0.0.0-20250519205859-65aec10162f6 || >=9.11.0+incompatible, <9.11.16+incompatible || >=10.5.0+incompatible, <10.5.6+incompatible || >=10.6.0+incompatible, <10.6.6+incompatible || >=10.7.0+incompatible, <10.7.3+incompatible || >=10.8.0+incompatible, <10.8.1+incompatible · fixed in 0.0.0-20250519205859-65aec10162f6, 9.11.16+incompatible, 10.5.6+incompatible, 10.6.6+incompatible, 10.7.3+incompatible, 10.8.1+incompatible

OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

• CWE-427

>=0.1.3, <0.2.1 · fixed in 0.2.1

DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs

• Microsoft, Inc Windows 11
• CWE-427

Commvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL Injection

• Commvault for Windows
• CWE-427

Uncontrolled Search Path Element in Arm Development Studio before 2025

• Arm Development Studio
• CWE-427

Uncontrolled search path in Lenovo TrackPoint Quick Menu

• Lenovo TrackPoint Quick Menu
• CWE-427

Uncontrolled search path in Motorola Software Fix

• Motorola Software Fix
• CWE-427

Uncontrolled search path in Sophos Intercept X for Windows Installer

• Sophos Intercept X for Windows Installer
• CWE-427

Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation

• Panda Security Panda Global Protection 2016
• Panda Security Panda Antivirus Pro 2016
• CWE-427

Emerson ValveLink Products Uncontrolled Search Path Element

• Emerson ValveLink SOLO
• Emerson ValveLink DTM
• CWE-427

IBM i privilege escalation

• i
• CWE-427

Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

• notepad-plus-plus
• Broken access control
• CWE-272

DLL-HiJacking

• checkpoint Check Point SmartConsole
• CWE-427

Uncontrolled search path in Trend Micro, Inc. Trend Micro Worry-Free Business Security Services

• Trend Micro, Inc. Trend Micro Worry-Free Business Security Services
• CWE-427

Uncontrolled search path in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-427

Uncontrolled search path in Trend Micro, Inc. Trend Micro Apex One and others

• Trend Micro, Inc. Trend Micro Apex One
• Trend Micro, Inc. Trend Micro Apex One as a Service
• CWE-427

IBM i privilege escalation

• i
• CWE-427

ClipShare Server Allows Local Privilege Escalation via DLL Hijacking

• thevindu-w clip_share_server
• CWE-427

Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• Action1
• CWE-427

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• CWE-427

<5.8.1 · fixed in 5.8.1

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to COM hijacking

• HCL Software HCL Traveler for Microsoft Outlook (HTMO)
• CWE-427

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking

• HCL Software HCL Traveler for Microsoft Outlook (HTMO)
• CWE-427

Wondershare Filmora Installer NFWCHK.exe uncontrolled search path

• Wondershare Filmora
• CWE-426
• CWE-427

Sangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path

• Sangfor 零信任访问控制系统 aTrust
• CWE-426
• CWE-427

Binary Planting / LoadLibrary DLL's not Signed

• ABB ASPECT-Enterprise
• ABB NEXUS Series
• CWE-427

Privilege Escalation and Arbitrary code execution in F1E Endpoint

• Forcepoint FIE Endpoint
• CWE-427

An issue in Blizzard Battle.net v2.40.0.15267 allows attackers to escalate privileges via placing a crafted shell script or executable into the C:\ProgramData directory.

• CWE-427

CBEWIN Anytxt Searcher ATService.exe uncontrolled search path

• CBEWIN Anytxt Searcher
• CWE-426
• CWE-427

Uncontrolled search path in Intel(R) Graphics Driver software

• Intel(R) Graphics Driver software
• CWE-427