Advisories · Weakness
CWE-427.
Every Advisory and CVE whose sources give the weakness CWE-427, newest first.
- CVSS 7.3 High
Uncontrolled search path in AIM-T (AMD Integrated Management Technology) software
- AIM-T (AMD Integrated Management Technology) software
- CWE-427
- CVSS 7.3 High
Visual Studio Code Elevation of Privilege Vulnerability
- Microsoft Visual Studio Code
- CWE-427
- CVSS 7.3 High
Visual Studio Installer Elevation of Privilege Vulnerability
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Siemens ModelSim and others
- Siemens ModelSim
- Siemens Questa
- CWE-427
- CVSS 7.8 High
Tally Prime Edit Log v2.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll.
- CWE-427
- CVSS 7.3 High
NetMod VPN Client 5.3.1 is vulnerable to DLL injection, allowing an attacker to execute arbitrary code by placing a malicious DLL in a directory where the application loads dependencies.
- CWE-427
- CVSS 8.5 High
Local privilege escalation in FlexNet Publisher
- Flexera FlexNet Publisher
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer
- silabs.com USBXpress Win 98SE Dev Kit
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in USBXpress SDK installer
- silabs.com USBXpress SDK
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in USBXpress 4 SDK installer
- silabs.com USBXpress 4 SDK
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer
- silabs.com USBXpress Dev Kit
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installer
- silabs.com CP210x VCP Windows
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in CP210 VCP Win 2k installer
- silabs.com CP210 VCP Win 2k
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in ToolStick installer
- silabs.com ToolStick
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in Flash Programming Utility installer
- silabs.com Flash Programming Utility
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in Configuration Wizard 2 installer
- silabs.com Configuration Wizard 2
- CWE-427
- CVSS 8.6 High
Uncontrolled search path can lead to DLL hijacking in Silicon Labs IDE installer
- silabs.com Silicon Labs IDE (8-bit)
- CWE-427
- CVSS 8.8 High
IBM Cognos Dashboards on Cloud Pak for Data privilege escalation
- IBM Cognos Dashboards on Cloud Pak for Data
- CWE-427
- CVSS 7.8 High
A DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6.
- CWE-427
- CVSS 7.8 High
Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
- Adobe Photoshop Desktop
- CWE-427
- CVSS 7.8 High
DLL Hijacking vulnerability in SAPSetup
- SAP_SE SAPSetup
- CWE-427
- CVSS 6.6 Medium
Uncontrolled search path in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Acronis Cyber Protect 16
- Acronis Cyber Protect 16
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Trend Micro, Inc. Trend Micro Deep Security
- Trend Micro, Inc. Trend Micro Deep Security
- CWE-427
- CVSS 7.8 High
QVPN Device Client
- QNAP Systems Inc. QVPN Windows
- CWE-427
- CVSS 3.3 Low
DLL Hijacking vulnerability in SAP Product Lifecycle Costing
- SAP_SE SAP Product Lifecycle Costing
- CWE-427
- CVSS 7.8 High
Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32
- Mitsubishi Electric Corporation GENESIS64
- Mitsubishi Electric Corporation ICONICS Suite
- CWE-427
- CVSS 7.8 High
Malicious Code Execution Vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, MC Works64, and GENESIS32
- Mitsubishi Electric Corporation GENESIS64
- Mitsubishi Electric Corporation ICONICS Suite
- CWE-427
- CVSS 7.8 High
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- NoMachine
- CWE-427
- CVSS 7.8 High
Panda Security Dome VPN DLL Hijacking Local Privilege Escalation Vulnerability
- Panda Security Dome
- CWE-427
- CVSS 7.3 High
Famatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- Famatech Advanced IP Scanner
- CWE-427
- CVSS 7.8 High
Uncontrolled search path in needrestart
- needrestart
- CWE-427
- CVSS 7.8 HighCritical · CVSS 7+ and EPSS
Uncontrolled search path in needrestart
- needrestart
- CWE-427
- CVSS 6.7 Medium
Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element.
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) oneAPI DPC++/C++ Compiler
- Intel(R) oneAPI DPC++/C++ Compiler
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Quartus(R) Prime Pro Edition software for Windows
- Intel(R) Quartus(R) Prime Pro Edition software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Quartus(R) Prime Standard Edition software for Windows
- Intel(R) Quartus(R) Prime Standard Edition software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Graphics Driver installers
- Intel(R) Graphics Driver installers
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) VTune(TM) Profiler software
- Intel(R) VTune(TM) Profiler software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Server Board S2600ST Family BIOS and Firmware Update software
- Intel(R) Server Board S2600ST Family BIOS and Firmware Update software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) SDP Tool for Windows software
- Intel(R) SDP Tool for Windows software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in ACAT software maintained by Intel(R) for Windows
- ACAT software maintained by Intel(R) for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Fortran Compiler Classic software
- Intel(R) Fortran Compiler Classic software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) PROSet/Wireless WiFi software for Windows
- Intel(R) PROSet/Wireless WiFi software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows
- Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) MAS software
- Intel(R) MAS software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) oneAPI Math Kernel Library software for Windows
- Intel(R) oneAPI Math Kernel Library software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime…
- Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Rendering Toolkit software
- Intel(R) Rendering Toolkit software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) IPP software for Windows
- Intel(R) IPP software for Windows
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Binary Configuration Tool software for Windows
- Intel(R) Binary Configuration Tool software for Windows
- CWE-427
- CVSS 8.8 High
Sound Research SECOMN64 Escalation of Privilege
- Sound Research SECOMN64 Driver
- CWE-427
- CVSS 6.0 Medium
Sound Research SECOMN64 Escalation of Privilege
- Sound Research SECOMN64 Driver
- CWE-427
- CVSS 7.0 High
Uncontrolled search path in Siemens Solid Edge SE2024
- Siemens Solid Edge SE2024
- CWE-427
- CVSS 5.9 Medium
Safearchive Path Traversal vulnerability in github.com/google/safearchive
- CWE-427
<0.0.0-20241025131057-f7ce9d7b6f9c · fixed in 0.0.0-20241025131057-f7ce9d7b6f9c
GHSA-q3rp-vvm7-j8jg · CVE-2024-10389 - CVSS 6.3 Medium
Uncontrolled search path in Naver Whale browser Installer
- Naver Whale browser Installer
- CWE-427
- CVSS 7.8 High
An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file.
- CWE-427
- CVSS 8.5 High
VSO ConvertXtoDvd ConvertXtoDvd.exe uncontrolled search path
- VSO ConvertXtoDvd
- CWE-427
- CVSS 8.5 High
OpenSight Software FlashFXP FlashFXP.exe uncontrolled search path
- OpenSight Software FlashFXP
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Acronis Cyber Files
- Acronis Cyber Files
- CWE-427