CWE-427.

Uncontrolled Search Path Element in Owl opds

• Owl opds
• CWE-427

Uncontrolled search path in Ricoh Company, Ltd. ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール

• Ricoh Company, Ltd. ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール
• CWE-427

OpenClaw affected by potential code execution via unsafe hook module path handling in Gateway

• Path traversal
• CWE-427

>=2026.1.5, <2026.2.14 · fixed in 2026.2.14

OpenClaw: Command hijacking via unsafe PATH handling (bootstrapping + node-host PATH overrides)

• Command injection
• CWE-427

<2026.2.14 · fixed in 2026.2.14

Flos Freeware Notepad2 Msimg32.dll uncontrolled search path

• Flos Freeware Notepad2
• CWE-426
• CWE-427

Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path

• Unidocs ezPDF DRM Reader
• Unidocs ezPDF Reader
• CWE-426
• CWE-427

Uncontrolled search path in AMD Vivado™ Documentation Navigator Installation (Windows)

• AMD Vivado™ Documentation Navigator Installation (Windows)
• CWE-427

Uncontrolled search path in M-Audio M-Track Duo HD

• M-Audio M-Track Duo HD
• CWE-427

Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges

• DALIBO PostgreSQL Anonymizer
• CWE-427

Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14

• DALIBO PostgreSQL Anonymizer
• CWE-427

Uncontrolled search path in AMD Vivado™ Installation (Windows)

• AMD Vivado™ Installation (Windows)
• CWE-427

Uncontrolled search path in AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly… and others

• AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics (formerly codenamed "Renoir")
• AMD Ryzen™ 7035 Series Processors with Radeon™ Graphics (formerly codenamed "Rembrandt R")
• CWE-427

Uncontrolled search path in AI Playground

• AI Playground
• CWE-427

Uncontrolled search path in VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits

• VTune(TM) Profiler software and Intel(R) oneAPI Base Toolkits
• CWE-427

Artifex MuPDF win_main.c get_system_dpi uncontrolled search path

• Artifex MuPDF
• CWE-426
• CWE-427

Uncontrolled search path in Siemens SINEC NMS and others

• Siemens SINEC NMS
• Siemens User Management Component (UMC)
• CWE-427

Uncontrolled search path in Siemens SINEC NMS

• Siemens SINEC NMS
• CWE-427

ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation

• asterisk
• CWE-427

Asterisk vulnerable to potential privilege escalation

• asterisk
• CWE-427

Uncontrolled search path in Roland Corporation Roland Cloud Manager

• Roland Corporation Roland Cloud Manager
• CWE-427

PsySH has Local Privilege Escalation via CWD .psysh.php auto-load

• CWE-427

<0.11.23 || >=0.12.0, <0.12.19 · fixed in 0.11.23, 0.12.19

Component Object Model (COM) Hijacking in Symantec Endpoint Protection Windows Client

• Broadcom Symantec Endpoint Protection Windows Client
• CWE-427

Uncontrolled search path in FUJIFILM Business Innovation Corp. beat-access for Windows

• FUJIFILM Business Innovation Corp. beat-access for Windows
• CWE-427

Uncontrolled search path in Western Digital WD Discovery

• Western Digital WD Discovery
• CWE-427

Crucial Storage Executive < 11.08.082025.00 Installer DLL Preloading LPE

• Micron Technology, Inc. Crucial Storage Executive
• CWE-427

Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• Discord Client
• CWE-427

D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path

• D-Link D-View 8
• CWE-427

Uncontrolled search path in Fsas Technologies Inc. ServerView Agents for Windows

• Fsas Technologies Inc. ServerView Agents for Windows
• CWE-427

Uncontrolled search path in NVIDIA CUDA Toolkit

• NVIDIA CUDA Toolkit
• CWE-427

Uncontrolled search path in NVIDIA CUDA Toolkit

• NVIDIA CUDA Toolkit
• CWE-427

AVEVA Process Optimization Uncontrolled Search Path Element

• AVEVA Process Optimization
• CWE-427

CoolerMaster MasterPlus 1.8.5 - 'MPService' Unquoted Service Path

• Cooler Master Technology Inc. Cooler Master MasterPlus
• CWE-427

Uncontrolled search path in PIONEER CORPORATION USB DAC Amplifier APS-DA101JS and others

• PIONEER CORPORATION USB DAC Amplifier APS-DA101JS
• PIONEER CORPORATION USB DAC Amplifier APS-DA101JR
• CWE-427

NREL BEopt 2.8.0 Insecure Library Loading Arbitrary Code Execution

• NREL BEopt
• CWE-427

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

• Altera Quartus Prime Standard
• Altera Quartus Prime Lite
• CWE-427

Quartus® Prime Standard and Quartus® Prime Lite Security Advisory

• Altera Quartus Prime Standard
• Altera Quartus Prime Lite
• CWE-427

Quartus Prime Pro Edition Advisory

• Altera Quartus Prime Pro
• CWE-427

Quartus Prime Pro Edition Installer Advisory

• Altera Quartus Prime Pro
• CWE-427

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows.

• CWE-427

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.

• CWE-427

Uncontrolled search path in Eaton UPS Companion software

• Eaton UPS Companion software
• CWE-427

Uncontrolled search path in Eaton UPS Companion Software

• Eaton UPS Companion Software
• CWE-427

Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• Soda PDF Desktop
• CWE-427

PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

• PDFsam Enhanced
• CWE-427

TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability

• TradingView Desktop
• CWE-427

FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll

• filezilla-project FileZilla Client
• CWE-427

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

• CWE-427

<7.17.0 · fixed in 7.17.0

Hubstaff 1.6.13 and 1.6.14 DLL Search Order Hijacking via wow64log Library

• Hubstaff
• CWE-427

High Level Synthesis Compiler Security Advisory

• Altera High Level Synthesis Compiler
• CWE-427

High Level Synthesis Compiler Security Advisory

• Altera High Level Synthesis Compiler
• CWE-427

Quartus Prime Standard Security Advisory

• Altera Quartus Prime Standard
• CWE-427

Quartus Prime Pro Edition Advisory

• Altera Quartus Prime Pro
• CWE-427

Quartus Prime Standard Security Advisory

• Altera Quartus Prime Standard
• CWE-427

Privilege Escalation via Process Hijacking in 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instruction

• TeamViewer DEX
• CWE-427

Privilege Escalation via Uncontrolled Search Path in 1E-Nomad-SetWorkRate instruction

• TeamViewer DEX
• CWE-427

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISP.DLL

• MailEnable
• CWE-427

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISO.DLL

• MailEnable
• CWE-427

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLL

• MailEnable
• CWE-427

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPO.DLL

• MailEnable
• CWE-427

MailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIPC.DLL

• MailEnable
• CWE-427