agentprime: CWE-427

CVE-2019-16447: Uncontrolled search path in Adobe Illustrator CC

Fri, 06 Nov 2026 18:19:50 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-122133: Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

Wed, 04 Nov 2026 20:36:52 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

Wed, 04 Nov 2026 11:02:42 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-88066: Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable

Tue, 03 Nov 2026 20:07:52 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-28327: SolarWinds Dameware DLL Hijacking Vulnerability

Tue, 03 Nov 2026 16:21:32 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-116243: pgAdmin 4: Utility binary path can point at a shared storage directory

Fri, 30 Oct 2026 19:55:14 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103665: Uncontrolled search path in Yamaha Corporation Yamaha LAN Monitor for Windows

Thu, 29 Oct 2026 11:33:30 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-118131: CVE-2026-118131

Tue, 27 Oct 2026 17:23:46 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104349: Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

Tue, 27 Oct 2026 16:21:54 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-107090: An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic

Mon, 26 Oct 2026 00:00:00 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91093: HP One Agent Software – Security Update

Fri, 23 Oct 2026 18:33:58 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92202: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

Wed, 21 Oct 2026 17:18:40 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-102438: Uncontrolled search path in ASUS Armoury Crate and others

Tue, 20 Oct 2026 02:00:05 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71170: Uncontrolled search path in Dell Application Store

Mon, 19 Oct 2026 19:35:38 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-110936: Uncontrolled search path in Siemens Software Center

Thu, 15 Oct 2026 14:01:17 GMT

CVSS 8.4 (High). Critical: In CISA’s KEV catalogue since 20 Oct 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.

Metalama allows local code execution through DLL planting in shared temporary directories

Wed, 14 Oct 2026 19:24:53 GMT

Metalama.Framework <2025.1.18 || >=2026.0.0-preview, <2026.0.25 || >=2026.1.0-preview, <2026.1.19, fixed in 2025.1.18, 2026.0.25, 2026.1.19. CVSS 8.2 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-108390: HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking

Wed, 14 Oct 2026 17:17:24 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-103845: Dimension | Uncontrolled Search Path Element (CWE-427)

Tue, 13 Oct 2026 19:50:48 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-69923: Windows AI Elevation of Privilege Vulnerability

Tue, 13 Oct 2026 19:00:22 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-108693: ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate

Sun, 11 Oct 2026 01:35:43 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

Thu, 08 Oct 2026 16:44:04 GMT

praisonaiagents <1.6.78, fixed in 1.6.78. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-107615: DLL search order hijacking via screenhooks libraries in TightVNC Server

Thu, 08 Oct 2026 13:39:59 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

Tue, 06 Oct 2026 18:58:38 GMT

knowns <0.30.0, fixed in 0.30.0. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-106186: Uncontrolled search path in Google Chrome

Tue, 06 Oct 2026 18:41:37 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-104809: Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

Mon, 05 Oct 2026 08:32:14 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

Wed, 30 Sep 2026 23:27:59 GMT

gitpython <3.1.60, fixed in 3.1.60. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-47570: Uncontrolled search path in NVIDIA GeForce and others

Wed, 30 Sep 2026 15:50:40 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-89325: Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

Thu, 24 Sep 2026 18:58:25 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6935: Multiple Vulnerabilities in IBM Concert Software

Wed, 23 Sep 2026 20:55:14 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-91803: Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

Wed, 23 Sep 2026 07:50:13 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-83598: Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

Tue, 22 Sep 2026 17:04:21 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25264: Uncontrolled Search Path Element in Qualcomm Software Center

Tue, 22 Sep 2026 09:45:20 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-54916: NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/init.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

Thu, 17 Sep 2026 20:01:14 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56795: Uncontrolled search path in Dell Driver Pack For Windows OS and others

Thu, 17 Sep 2026 15:24:41 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92838: GeoVision GV-Remote E-Map dll hijacking vulnerability

Thu, 17 Sep 2026 01:50:05 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-92180: pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Tue, 15 Sep 2026 18:05:23 GMT

CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-68955: Uncontrolled search path in Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows…

Mon, 14 Sep 2026 06:35:43 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-87530: Uncontrolled search path in Google Chrome

Wed, 09 Sep 2026 00:09:54 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-76199: Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

Tue, 08 Sep 2026 19:32:53 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability

Tue, 08 Sep 2026 17:13:14 GMT

CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-6958: Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe

Fri, 04 Sep 2026 15:06:10 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

Tue, 01 Sep 2026 20:27:20 GMT

nltk <3.10.3, fixed in 3.10.3. CVSS 8.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-45221: Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

Tue, 01 Sep 2026 19:39:46 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-19590: Uncontrolled search path in OpenAI Codex Desktop and others

Tue, 01 Sep 2026 17:04:43 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-82649: SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

Sun, 30 Aug 2026 14:33:31 GMT

CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-65093: Uncontrolled search path in NVIDIA OpenShell

Tue, 25 Aug 2026 20:15:14 GMT

CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55013: Windows Remote Help Defense Spoofing Vulnerability

Thu, 20 Aug 2026 21:45:17 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55015: Microsoft Remote Help Denial of Service Vulnerability

Thu, 20 Aug 2026 21:45:17 GMT

CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59781: Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.

Tue, 18 Aug 2026 12:21:29 GMT

CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-56090: Uncontrolled search path in Dell ObjectScale

Mon, 17 Aug 2026 13:44:51 GMT

CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.

agentprime: CWE-427

CVE-2019-16447: Uncontrolled search path in Adobe Illustrator CC

CVE-2026-122133: Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

CVE-2026-59264: Apache OpenOffice: Uncontrolled search path element vulnerability in Windows installer

CVE-2026-88066: Claude Desktop: Uncontrolled Search Path Enables Arbitrary Code Execution via Malicious Git Executable

CVE-2026-28327: SolarWinds Dameware DLL Hijacking Vulnerability

CVE-2026-116243: pgAdmin 4: Utility binary path can point at a shared storage directory

CVE-2026-103665: Uncontrolled search path in Yamaha Corporation Yamaha LAN Monitor for Windows

CVE-2026-118131: CVE-2026-118131

CVE-2026-104349: Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

CVE-2026-107090: An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary code via the Maltego Windows installer executable-resolution logic

CVE-2026-91093: HP One Agent Software – Security Update

CVE-2026-92202: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

CVE-2026-102438: Uncontrolled search path in ASUS Armoury Crate and others

CVE-2026-71170: Uncontrolled search path in Dell Application Store

CVE-2026-110936: Uncontrolled search path in Siemens Software Center

Metalama allows local code execution through DLL planting in shared temporary directories

CVE-2026-108390: HestiaCP Low-Privileged User to Root via Config-Field Injection and PATH Hijacking

CVE-2026-103845: Dimension | Uncontrolled Search Path Element (CWE-427)

CVE-2026-69923: Windows AI Elevation of Privilege Vulnerability

CVE-2026-108693: ImageMagick through 7.1.2-33 and 6.9.13-58 Uncontrolled Search Path via Ghostscript Delegate

PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

CVE-2026-107615: DLL search order hijacking via screenhooks libraries in TightVNC Server

knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

CVE-2026-106186: Uncontrolled search path in Google Chrome

CVE-2026-104809: Mitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code Execution

GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution

CVE-2026-47570: Uncontrolled search path in NVIDIA GeForce and others

CVE-2026-89325: Rapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation

CVE-2026-6935: Multiple Vulnerabilities in IBM Concert Software

CVE-2026-91803: Security Vulnerability Report – Foxit PDF Editor/Reader Updater DLL Search Path Hijacking

CVE-2026-83598: Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

CVE-2026-25264: Uncontrolled Search Path Element in Qualcomm Software Center

CVE-2026-54916: NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft

CVE-2026-56795: Uncontrolled search path in Dell Driver Pack For Windows OS and others

CVE-2026-92838: GeoVision GV-Remote E-Map dll hijacking vulnerability

CVE-2026-92180: pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

CVE-2026-68955: Uncontrolled search path in Rakuten Kobo Inc. The installer for Rakuten Kobo Desktop Application (Windows…

CVE-2026-87530: Uncontrolled search path in Google Chrome

CVE-2026-76199: Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)

CVE-2026-72980: Windows Hello Security Feature Bypass Vulnerability

CVE-2026-6958: Acunetix 25.11.251107123 Local Privilege Escalation via wvsc.exe

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

CVE-2026-45221: Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path

CVE-2026-19590: Uncontrolled search path in OpenAI Codex Desktop and others

CVE-2026-82649: SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path

CVE-2026-65093: Uncontrolled search path in NVIDIA OpenShell

CVE-2026-55013: Windows Remote Help Defense Spoofing Vulnerability

CVE-2026-55015: Microsoft Remote Help Denial of Service Vulnerability

CVE-2026-59781: Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading.

CVE-2026-56090: Uncontrolled search path in Dell ObjectScale

CVE-2026-54916: NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/init.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud Metadata credential theft