Advisories · Weakness

CWE-427.

Every Advisory and CVE whose sources give the weakness CWE-427, newest first.

CVE-2026-44406 CVE record

CVSS 5.7 Medium

DLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartview
- ZTE ZXCLOUD iRAI
- CWE-427
Not analysed yet 7 May 2026
CVE-2026-40004 CVE record

CVSS 5.5 Medium

openssl.cnf Privilege Escalation Vulnerability in ZTE Cloud PC Client uSmartview
- ZTE ZXCLOUD iRAI
- CWE-427
Not analysed yet 7 May 2026
CVE-2026-21661 CVE record

CVSS 8.4 High

AC2000 Uncontrolled Search Path Element
- Johnson Controls AC2000
- CWE-427
Not analysed yet 6 May 2026
CVE-2026-6788 CVE record

CVSS 8.5 High

Uncontrolled search path in PluginLauncher allows SYSTEM code execution in WatchGuard Agent
- WatchGuard Agent
- CWE-427
Not analysed yet 6 May 2026
openclaw npm

CVSS 8.4 High

OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution
- Code injection
- CWE-427
<2026.4.23 · fixed in 2026.4.23

GHSA-r39h-4c2p-3jxp · CVE-2026-45004 Not analysed yet 5 May 2026
openclaw npm

CVSS 4.1 Medium

OpenClaw: Workspace dotenv files cannot override connector endpoint hosts
- CWE-427
- CWE-441
<2026.4.22 · fixed in 2026.4.22

GHSA-55cf-xx38-4p9p · CVE-2026-45003 Not analysed yet 4 May 2026
CVE-2026-25852 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Acronis DeviceLock DLP
- Acronis DeviceLock DLP
- CWE-427
Not analysed yet 29 Apr 2026
CVE-2026-7279 CVE record

CVSS 8.5 High

eMPIA Technology｜AVACAST - DLL Hijacking
- eMPIA Technology AVACAST
- CWE-427
Not analysed yet 28 Apr 2026
openclaw npm

CVSS 5.4 Medium

OpenClaw: MCP stdio server env could load dangerous startup variables from workspace config
- CWE-427
- CWE-454
<2026.4.20 · fixed in 2026.4.20

GHSA-mj59-h3q9-ghfh · CVE-2026-44995 Not analysed yet 25 Apr 2026
CVE-2026-42171 CVE record

CVSS 7.8 High

Uncontrolled search path in Nullsoft Scriptable Install System
- Nullsoft Scriptable Install System
- CWE-427
Not analysed yet 24 Apr 2026
CVE-2026-32172 CVE record

CVSS 8.0 High

Microsoft Power Apps Remote Code Execution Vulnerability
- Microsoft Power Apps
- CWE-427
Not analysed yet 23 Apr 2026
CVE-2025-10549 CVE record

CVSS 5.1 Medium

DLL Hijacking in EfficientLab Controlio Leads to Local Privilege Escalation
- EfficientLab, LLC Controlio
- CWE-427
Not analysed yet 23 Apr 2026
CVE-2026-34488 CVE record

CVSS 7.0 High

Uncontrolled search path in i-PRO Co., Ltd. IP Setting Software
- i-PRO Co., Ltd. IP Setting Software
- CWE-427
Not analysed yet 23 Apr 2026
CVE-2026-32679 CVE record

CVSS 8.4 High

Uncontrolled search path in Japan Media Systems Corporation Downloader5Installer.exe and others
- Japan Media Systems Corporation Downloader5Installer.exe
- Japan Media Systems Corporation Downloader5InstallerForAdmin.exe
- CWE-427
Not analysed yet 23 Apr 2026
CVE-2026-40342 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
- firebird
- Path traversal
- Code injection
Not analysed yet 17 Apr 2026
CVE-2026-6421 CVE record

CVSS 7.3 High

Mobatek MobaXterm Home Edition msimg32.dll uncontrolled search path
- Mobatek MobaXterm Home Edition
- CWE-426
- CWE-427
Not analysed yet 17 Apr 2026
CVE-2026-22619 CVE record

CVSS 7.8 High

Uncontrolled search path in Eaton IPP software
- Eaton IPP software
- CWE-427
Not analysed yet 16 Apr 2026
CVE-2026-34632 CVE record

CVSS 8.6 High

Photoshop Installer | CWE-427: Uncontrolled Search Path Element
- Adobe Photoshop Installer
- CWE-427
Not analysed yet 15 Apr 2026
CVE-2026-4134 CVE record

CVSS 7.0 High

Uncontrolled search path in Lenovo Software Fix
- Lenovo Software Fix
- CWE-427
Not analysed yet 15 Apr 2026
CVE-2026-1636 CVE record

CVSS 5.4 Medium

Uncontrolled search path in Lenovo Service Bridge
- Lenovo Service Bridge
- CWE-427
Not analysed yet 15 Apr 2026
CVE-2026-5397 CVE record

CVSS 7.8 High

Vulnerability Related to an Uncontrolled Search Path Element in a UPS Management Application
- OMRON SOCIAL SOLUTIONS CO., Ltd. PowerAttendant Standard Edition
- CWE-427
Not analysed yet 15 Apr 2026
CVE-2026-4158 CVE record

CVSS 7.3 High

KeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- KeePassXC
- CWE-427
Not analysed yet 11 Apr 2026
CVE-2026-5055 CVE record

CVSS 7.8 High

NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- NoMachine
- CWE-427
Not analysed yet 11 Apr 2026
CVE-2026-28704 CVE record

CVSS 8.4 High

Uncontrolled search path in Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Emocheck
- Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) Emocheck
- CWE-427
Not analysed yet 10 Apr 2026
CVE-2026-30478 CVE record

CVSS 8.8 High

A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable.
- CWE-427
Not analysed yet 9 Apr 2026
CVE-2026-40031 CVE record

CVSS 8.5 High

MemProcFS < 5.17 DLL/Shared Library Hijacking
- ufrisk MemProcFS
- CWE-427
Not analysed yet 8 Apr 2026
CVE-2025-14821 CVE record

CVSS 7.8 High

Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows
- Red Hat Hardened Images
- Red Hat Enterprise Linux 10
- CWE-427
Not analysed yet 7 Apr 2026
openclaw npm

CVSS 5.8 Medium

OpenClaw: Incomplete host-env-security-policy allows untrusted model to substitute compiler binaries via env overrides
- CWE-427
<2026.3.31 · fixed in 2026.3.31

GHSA-g8xp-qx39-9jq9 · CVE-2026-41373 Not analysed yet 3 Apr 2026
CVE-2026-27774 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Acronis True Image
- Acronis True Image
- CWE-427
Not analysed yet 2 Apr 2026
CVE-2026-28728 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Acronis True Image
- Acronis True Image
- CWE-427
Not analysed yet 2 Apr 2026
CVE-2026-5271 CVE record

CVSS 5.6 Medium

Possible to hijack modules in current working directory
- Python Software Foundation pymanager
- CWE-427
Not analysed yet 1 Apr 2026
CVE-2026-3775 CVE record

CVSS 7.8 High

Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- Foxit Software Inc. Foxit PDF Editor
- Foxit Software Inc. Foxit PDF Reader
- CWE-427
Not analysed yet 1 Apr 2026
openssl-encrypt PyPI

CVSS 9.3 CriticalCritical · CVSS 9+

openssl-encrypt: Dynamic .so loading for Whirlpool uses broad glob pattern without integrity verification
- CWE-426
- CWE-427
<1.4.0 · fixed in 1.4.0

GHSA-j48q-4c78-rhf9 · CVE-2026-74872 Not analysed yet 31 Mar 2026
CVE-2026-22561 CVE record

CVSS 4.7 Medium

Uncontrolled search path in Anthropic Claude Desktop - Windows
- Anthropic Claude Desktop - Windows
- CWE-427
Not analysed yet 31 Mar 2026
CVE-2026-34054 CVE record

CVSS 7.8 High

openssl on Windows built with openssldir set from the build machine (Uncontrolled Search Path Element)
- microsoft vcpkg
- CWE-427
Not analysed yet 31 Mar 2026
CVE-2026-4962 CVE record

CVSS 7.3 High

UltraVNC Service version.dll uncontrolled search path
- UltraVNC
- CWE-426
- CWE-427
Not analysed yet 27 Mar 2026
CVE-2026-28760 CVE record

CVSS 8.4 High

Uncontrolled search path in RATOC Systems, Inc. RATOC RAID Monitoring Manager for Windows
- RATOC Systems, Inc. RATOC RAID Monitoring Manager for Windows
- CWE-427
Not analysed yet 26 Mar 2026
CVE-2026-26306 CVE record

CVSS 8.4 High

Uncontrolled search path in OM Digital Solutions Corporation OM Workspace (Windows Edition)
- OM Digital Solutions Corporation OM Workspace (Windows Edition)
- CWE-427
Not analysed yet 25 Mar 2026
CVE-2026-4546 CVE record

CVSS 7.3 High

Flos Freeware Notepad2 TextShaping.dll uncontrolled search path
- Flos Freeware Notepad2
- CWE-426
- CWE-427
Not analysed yet 22 Mar 2026
CVE-2026-4545 CVE record

CVSS 7.3 High

Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path
- Flos Freeware Notepad2
- CWE-426
- CWE-427
Not analysed yet 22 Mar 2026
CVE-2026-33156 CVE record

CVSS 7.8 High

DLL Sideloading in ScreenToGif
- NickeManarin ScreenToGif
- CWE-426
- CWE-427
Not analysed yet 20 Mar 2026
CVE-2025-69784 CVE record

CVSS 8.8 High

A local, non-privileged attacker can abuse a vulnerable IOCTL interface exposed by the OpenEDR 2.5.1.0 kernel driver to modify the DLL injection path used by the product.
- CWE-427
Not analysed yet 16 Mar 2026
CVE-2026-2713 CVE record

CVSS 7.4 High

IBM Trusteer Rapport installer affected by uncontrolled search path element vulnerability
- IBM Trusteer Rapport installer
- CWE-427
Not analysed yet 10 Mar 2026
CVE-2026-24317 CVE record

CVSS 5.0 Medium

DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT
- SAP_SE SAP GUI for Windows with active GuiXT
- CWE-427
Not analysed yet 10 Mar 2026
CVE-2026-30896 CVE record

CVSS 8.4 High

Uncontrolled search path in Qsee Client
- Qsee Client
- CWE-427
Not analysed yet 9 Mar 2026
CVE-2026-3787 CVE record

CVSS 7.3 High

UltraVNC Windows Service cryptbase.dll uncontrolled search path
- UltraVNC
- CWE-426
- CWE-427
Not analysed yet 8 Mar 2026
CVE-2026-28712 CVE record

CVSS 6.3 Medium

Uncontrolled search path in Acronis Cyber Protect 17
- Acronis Cyber Protect 17
- CWE-427
Not analysed yet 5 Mar 2026
CVE-2026-28711 CVE record

CVSS 6.3 Medium

Uncontrolled search path in Acronis Cyber Protect 17
- Acronis Cyber Protect 17
- CWE-427
Not analysed yet 5 Mar 2026
CVE-2025-11792 CVE record

CVSS 7.3 High

Uncontrolled search path in Acronis Cyber Protect Cloud Agent
- Acronis Cyber Protect Cloud Agent
- CWE-427
Not analysed yet 5 Mar 2026
github.com/docker/cli Go

CVSS 7.0 High

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows
- CWE-427
>=19.03.0, <29.2.0 · fixed in 29.2.0

GHSA-p436-gjf2-799p · CVE-2025-15558 Not analysed yet 5 Mar 2026
CVE-2026-22270 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Dell PowerScale OneFS,
- Dell PowerScale OneFS,
- CWE-427
Not analysed yet 4 Mar 2026
CVE-2026-24502 CVE record

CVSS 8.8 High

Uncontrolled search path in Dell Command | Intel vPro Out of Band
- Dell Command | Intel vPro Out of Band
- CWE-427
Not analysed yet 3 Mar 2026
openclaw npm

CVSS 8.3 High

OpenClaw's hook transform module path allows traversal and arbitrary JavaScript module loading
- Path traversal
- CWE-427
>=2.0.0-beta3, <2026.2.14 · fixed in 2026.2.14

GHSA-7xhj-55q9-pc3m · CVE-2026-28393 Not analysed yet 3 Mar 2026
CVE-2026-25191 CVE record

CVSS 8.4 High

Uncontrolled search path in Digital Arts Inc. FinalCode Ver.5 series and others
- Digital Arts Inc. FinalCode Ver.5 series
- Digital Arts Inc. FinalCode Ver.6 series
- CWE-427
Not analysed yet 26 Feb 2026
CVE-2026-3091 CVE record

CVSS 6.7 Medium

Uncontrolled search path in Synology Presto Client
- Synology Presto Client
- CWE-427
Not analysed yet 24 Feb 2026
CVE-2026-21420 CVE record

CVSS 7.3 High

Uncontrolled search path in Dell Repository Manager
- Dell Repository Manager
- CWE-427
Not analysed yet 23 Feb 2026
CVE-2026-2492 CVE record

CVSS 7.0 High

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- TensorFlow
- CWE-427
Not analysed yet 20 Feb 2026
CVE-2026-2040 CVE record

CVSS 7.3 High

PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
- PDF-XChange Editor
- CWE-427
Not analysed yet 20 Feb 2026
CVE-2026-26099 CVE record

CVSS 8.4 High

Uncontrolled Search Path Element in Owl opds
- Owl opds
- CWE-427
Not analysed yet 20 Feb 2026
CVE-2026-26098 CVE record

CVSS 8.4 High

Uncontrolled Search Path Element in Owl opds
- Owl opds
- CWE-427
Not analysed yet 20 Feb 2026