Advisories · Weakness
CWE-427.
Every Advisory and CVE whose sources give the weakness CWE-427, newest first.
- CVSS 8.5 High
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLL
- MailEnable
- CWE-427
- CVSS 8.5 High
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLL
- MailEnable
- CWE-427
- CVSS 8.5 High
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLL
- MailEnable
- CWE-427
- CVSS 8.5 High
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAM.DLL
- MailEnable
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in Lenovo One Client
- Lenovo One Client
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in Lenovo App Store and others
- Lenovo App Store
- Lenovo Browser
- CWE-427
- CVSS 8.5 High
MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLL
- MailEnable
- CWE-427
- CVSS 7.3 High
Dylib Hijacking in Yandex Messenger
- Yandex Messenger
- CWE-427
- CVSS 7.3 High
Dylib Hijacking in Yandex Telemost
- Yandex Telemost
- CWE-427
- CVSS 7.3 High
Dylib Hijacking in Yandex Disk
- Yandex Disk
- CWE-427
- CVSS 9.8 CriticalCritical · CVSS 9+
Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection.
- CWE-427
- CVSS 8.8 High
Uncontrolled search path in NVIDIA TAO
- NVIDIA TAO
- CWE-427
- CVSS 7.8 High
Vim for Windows Uncontrolled Search Path Element Remote Code Execution Vulnerability
- vim
- CWE-427
- CVSS 3.7 Low
Keycloak unable to restrict access to the admin console
- CWE-427
<26.4.4 · fixed in 26.4.4
GHSA-vjr8-56p3-fmqq · CVE-2025-10939 - CVSS 6.6 Medium
Co-Installer Privilege Escalation
- Synaptics Fingerprint Driver
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in Sony Corporation INZONE Hub
- Sony Corporation INZONE Hub
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in LogStare Inc. Installer of LogStare Collector (for Windows)
- LogStare Inc. Installer of LogStare Collector (for Windows)
- CWE-427
- CVSS 9.3 CriticalCritical · CVSS 9+
Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges
- ASUSTOR ABP and AES
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in NEC Corporation RakurakuMusen Start EX
- NEC Corporation RakurakuMusen Start EX
- CWE-427
- CVSS 7.7 High
Malicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S
- Mitsubishi Electric Corporation MILCO.S Setting Application
- Mitsubishi Electric Corporation MILCO.S Setting Application (IR)
- CWE-427
- CVSS 7.3 High
External Control of System or Configuration Setting and Uncontrolled Search Path Element in sfw
- SocketDev firewall-release
- CWE-15
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in Siemens Software Center and others
- Siemens Software Center
- Siemens Solid Edge SE2025
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in Siemens Altair Grid Engine
- Siemens Altair Grid Engine
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel MPI Library
- Intel MPI Library
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel oneAPI DPC++C++ Compiler software
- Intel oneAPI DPC++C++ Compiler software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Processor Identification Utility
- Intel(R) Processor Identification Utility
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Instrumentation and Tracing Technology API (ITT API) software
- Instrumentation and Tracing Technology API (ITT API) software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Graphics Software
- Intel(R) Graphics Software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in System Event Log Viewer Utility software
- System Event Log Viewer Utility software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel Driver and Support Assistant
- Intel Driver and Support Assistant
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Distribution for Python software installers
- Intel(R) Distribution for Python software installers
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) One Boot Flash Update (Intel(R) OFU) software
- Intel(R) One Boot Flash Update (Intel(R) OFU) software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) System Support Utility
- Intel(R) System Support Utility
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) Killer(TM) Performance Suite software
- Intel(R) Killer(TM) Performance Suite software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Display Virtualization for Windows OS software
- Display Virtualization for Windows OS software
- CWE-427
- CVSS 5.4 Medium
Uncontrolled search path in Intel(R) CIP software
- Intel(R) CIP software
- CWE-427
- CVSS 8.2 High
Uncontrolled search path in NVIDIA NVApp
- NVIDIA NVApp
- CWE-427
- CVSS 8.5 High
HP Client Management Script Library – Security Update
- HP Inc HP Client Management Script Library
- CWE-427
- CVSS 7.8 High
DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in Wireless Tsukamoto Co., Ltd. WTW EAGLE (for Windows)
- Wireless Tsukamoto Co., Ltd. WTW EAGLE (for Windows)
- CWE-427
- CVSS 8.4 High
DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search path (C:\ProgramData\Evope).
- CWE-427
- CVSS 3.7 Low
Duplicate Advisory: Keycloak allows access to admin path through flaw
- CWE-427
<=26.4.2 · no fixed version yet
GHSA-c6cm-5gc7-c3f4 - CVSS 8.8 High
Multiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for Windows
- Docker Desktop
- CWE-427
- CVSS 7.3 High
LibreWolf Installer setup.nsi uncontrolled search path
- LibreWolf
- CWE-426
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in Lenovo PC Manager
- Lenovo PC Manager
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in RSUPPORT CO., LTD. RemoteCall Remote Support Program (for Operator)
- RSUPPORT CO., LTD. RemoteCall Remote Support Program (for Operator)
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in RSUPPORT CO., LTD. RemoteCall Remote Support Program (for Operator)
- RSUPPORT CO., LTD. RemoteCall Remote Support Program (for Operator)
- CWE-427
- CVSS 8.5 High
Uncontrolled search path in RSUPPORT CO., LTD. RemoteView PC Application Console
- RSUPPORT CO., LTD. RemoteView PC Application Console
- CWE-427
- CVSS 6.0 Medium
Uncontrolled search path in Fortinet FortiClientWindows
- Fortinet FortiClientWindows
- CWE-427
- CVSS 8.6 High
Uncontrolled search path in Eaton IPP software
- Eaton IPP software
- CWE-427
- CVSS 8.2 High
Uncontrolled search path in NVIDIA GeForce and others
- NVIDIA GeForce
- NVIDIA RTX, Quadro, NVS
- CWE-427
- CVSS 8.8 High
Privilege Escalation in Windows License plugin for Checkmk Windows Agent
- Checkmk
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in Anki
- Anki
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in DENSO TEN Limited. Multiple installers of DENSO TEN drive recorder viewer
- DENSO TEN Limited. Multiple installers of DENSO TEN drive recorder viewer
- CWE-427
- CVSS 7.3 High
DLL injection in Zabbix Agent and Agent 2 via OpenSSL configuration
- Zabbix
- CWE-427
- CVSS 8.4 High
Uncontrolled search path in Panasonic AutoDownloader
- Panasonic AutoDownloader
- CWE-427
- CVSS 6.7 Medium
Uncontrolled search path in NVIDIA Nsight Graphics
- NVIDIA Nsight Graphics
- CWE-427
- CVSS 8.8 High
DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking.
- CWE-427
- CVSS 7.3 High
Uncontrolled search path in Acronis True Image and others
- Acronis True Image
- Acronis True Image for Western Digital
- CWE-427
- CVSS 7.0 High
Uncontrolled search path in Seagate Toolkit
- Seagate Toolkit
- CWE-426
- CWE-427