CWE-427.

LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows

• LUCID Vision Labs Arena SDK
• CWE-427

Uncontrolled search path in Integrated Systems Technologies, Inc. NetKids iMark

• Integrated Systems Technologies, Inc. NetKids iMark
• CWE-427

Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows

• Amazon Kiro CLI
• CWE-427

Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows

• Amazon Kiro IDE
• CWE-427

Ghidra Swift Demangler Analyzer Arbitrary Code Execution via Project State

• National Security Agency Ghidra
• CWE-427

CheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sys uncontrolled search path

• CheckMAL AppCheck Pro
• CWE-426
• CWE-427

iDTM FDI Unauthorized Debug Interface Enablement

• Endress+Hauser FDI Package library
• CWE-427

Photoshop Installer | CWE-427: Uncontrolled Search Path Element

• Adobe Photoshop Installer
• CWE-427

Search Order Hijacking in ArkSigner's ArkSigner Desktop Client

• ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client
• CWE-427

electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`

• CWE-427

<26.15.0 · fixed in 26.15.0

GeoVision GV-IP Device Utility DLL Search Order Hijacking Vulnerability

• GeoVision Inc. GV-IP Device Utility
• CWE-427

HCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijacking

• HCLSoftware HCL Traveler for Microsoft Outlook (HTMO)
• CWE-427

Pipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loading

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-427

Uncontrolled search path in SBI SECURITIES Co.,Ltd. HYPER SBI 2

• SBI SECURITIES Co.,Ltd. HYPER SBI 2
• CWE-427

Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

• Adobe Creative Cloud Desktop
• CWE-427

DLL Hijacking vulnerability in SAProuter on Microsoft Windows

• SAP_SE SAProuter on Microsoft Windows
• CWE-427

ColdFusion | Uncontrolled Search Path Element (CWE-427)

• Adobe ColdFusion 2025
• Adobe ColdFusion 2023
• CWE-427

ColdFusion | Uncontrolled Search Path Element (CWE-427)

• Adobe ColdFusion 2025
• Adobe ColdFusion 2023
• CWE-427

Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path

• Tencent PC Manager
• CWE-426
• CWE-427

Uncontrolled search path in Fuji Electric Co.,Ltd. Pupsman

• Fuji Electric Co.,Ltd. Pupsman
• CWE-427

OpenClaw: Fake package roots could influence memory-core artifact loading

• CWE-427

<2026.4.25 · fixed in 2026.4.25

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c.

• CWE-427

Advant Master Online Builder DLL vulnerability

• ABB Control Builder A
• ABB 800xA for Advant Master
• CWE-427

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache packag...

• CWE-427

<0.22.1 · fixed in 0.22.1

Angular: Multiple Remote Code Execution Vulnerabilities in Angular Language Service VS Code Extension

• angular
• Cross-site scripting (XSS)
• Code injection

Insecure Search Path Vulnerability in PaperCut Print Deploy Client for Windows

• PaperCut Print Deploy
• CWE-427

Local privilege escalation in ANSSI’s DFIR-ORC

• ANSSI DFIR-ORC
• CWE-427

CPython >3.11 Insecure Input Validation resulting in privilege escalation

• Python Software Foundation CPython
• CWE-427

Uncontrolled search path in Dell Peripheral Manager

• Dell Peripheral Manager
• CWE-427

Uncontrolled search path in Dell Peripheral Manager

• Dell Peripheral Manager
• CWE-427

HP One Agent Software – Security Update

• HP Inc. HP One Agent Software
• CWE-427

Uncontrolled search path in Ricoh Company, Ltd. Multiple printer drivers and others

• Ricoh Company, Ltd. Multiple printer drivers
• KONICA MINOLTA JAPAN, INC. Multiple printer drivers
• CWE-427

Arbitrary code execution in MobaXterm Personal Edition (Portable)

• Mobatek MobaXterm Personal Edition (Portable)
• CWE-427

Arbitrary code execution in MobaXterm Personal Edition (Portable)

• Mobatek MobaXterm Personal Edition (Portable)
• CWE-427

IBM i is Affected by Privilege Escalation []

• i
• CWE-427

Local Privilege Escalation vulnerability in Check Point Identity Agent Full for Windows OS

• checkpoint Identity Agent
• CWE-427

Uncontrolled search path in Lenovo LanSchool Classic

• Lenovo LanSchool Classic
• CWE-427

Acrobat Reader | Uncontrolled Search Path Element (CWE-427)

• Adobe Acrobat DC
• Adobe Acrobat Reader DC
• CWE-427

Uncontrolled search path in Acronis DeviceLock DLP

• Acronis DeviceLock DLP
• CWE-427

Uncontrolled search path in Acronis DeviceLock DLP

• Acronis DeviceLock DLP
• CWE-427

Uncontrolled search path in Acronis DeviceLock DLP

• Acronis DeviceLock DLP
• CWE-427

A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.

• CWE-427

Espressif Shared GitHub DangerJS: Untrusted Search Path in DangerJS Action Entrypoint

• espressif shared-github-dangerjs
• CWE-427
• CWE-829

pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation

• mcdope pam_usb
• CWE-427

Uncontrolled search path in Synology BeeDrive for desktop

• Synology BeeDrive for desktop
• CWE-427

Untrusted Search Path

• Phoenix Contact AXC F 1152
• Phoenix Contact AXC F 1252
• CWE-427

Uncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loading

• Qt
• CWE-427

Mullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installer

• mullvadvpn-app
• Privilege escalation
• CWE-345

Claude HUD 0.0.12 Arbitrary Command Execution via COMSPEC Environment Variable

• jarrodwatts claude-hud
• CWE-427

Docker: `PUT /containers/{id}/archive` executes container binary on the host

• CWE-427

<=28.5.2 · no fixed version yet

Uncontrolled search path in AMD Radeon™ RX 5000 Series Graphics Products and others

• AMD Radeon™ RX 5000 Series Graphics Products
• AMD Radeon™ PRO W5000 Series Graphics Products
• CWE-427

Metasploit Pro on Windows: Local Privilege Escalation via OpenSSL Configuration File Loading

• Rapid7 Metasploit Pro
• Broken access control
• CWE-427

Uncontrolled search path in AMD AIM-T Manageability Service and others

• AMD AIM-T Manageability Service
• AMD Cloud Manageability Service (ACMS)
• CWE-427

Privilege escalation via mk_mysql agent plugin on Windows

• Checkmk
• CWE-427

Uncontrolled search path in Bytello Share (Windows Edition) installer executable

• Bytello Share (Windows Edition) installer executable
• CWE-427

Uncontrolled search path in AI Playground software

• AI Playground software
• CWE-427

Uncontrolled search path in Intel(R) Server Firmware Update Utility Software

• Intel(R) Server Firmware Update Utility Software
• CWE-427

Uncontrolled search path in Intel(R) Connectivity Performance Suite software installers

• Intel(R) Connectivity Performance Suite software installers
• CWE-427

Duplicate Advisory: OpenClaw vulnerable to arbitrary code execution via attacker-controlled setup-api.js loaded from cwd during env-key resolution

• CWE-427

<2026.4.23 · fixed in 2026.4.23

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable.

• CWE-427