CVE-2026-47570 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the CUDA driver where an attacker could cause a library to be loaded from an uncontrolled sea… |
CVE-2026-89325 | High | 7.8 | 2026-09-24 | An uncontrolled search path element in InsightVM assessment content in Rapid7 Insight Agent on Windows allows a local, low-privileged user to execute arbitrary… |
CVE-2026-6935 | High | 7.8 | 2026-09-23 | IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. A… |
CVE-2026-91803 | High | 8.8 | 2026-09-23 | A local privilege escalation vulnerability exists in the updater of Foxit PDF Editor/Reader due to unsafe loading of dynamic-link libraries from a user-writabl… |
CVE-2026-83598 | High | 7.8 | 2026-09-22 | Netdata is an open source observability tool. From rom 2.0.0 until 2.10.4, during Netdata Windows Agent MSI repair, powershell.exe runs as SYSTEM without -NoPr… |
CVE-2026-25264 | High | 8.8 | 2026-09-22 | Privilege escalation due to weak configuration during package extraction process. |
CVE-2026-54916 | High | 8.8 | 2026-09-17 | NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --… |
CVE-2026-56795 | High | 8.2 | 2026-09-17 | Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access… |
CVE-2026-92838 | High | 7.8 | 2026-09-17 | A DLL hijacking
vulnerability exists in the GeoVision GV-Remote E-Map desktop
application. The application loads one or more dynamic-link libraries (DLLs)
from… |
CVE-2026-92180 | High | 7.8 | 2026-09-15 | pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows l… |
CVE-2026-68955 | High | 7.8 | 2026-09-14 | The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory w… |
CVE-2026-87530 | High | 8.1 | 2026-09-09 | Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code… |
CVE-2026-76199 | High | 8.6 | 2026-09-08 | Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current… |
CVE-2026-72980 | Medium | 4.4 | 2026-09-08 | Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally. |
CVE-2026-6958 | High | 7.8 | 2026-09-04 | Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulnerability in the Web Vulnerability Scanning Engine (wvsc.exe) that allows low-pr… |
CVE-2026-45221 | High | 7.8 | 2026-09-01 | Konga before 2.1.0 contains a privilege escalation vulnerability that allows low-privileged local attackers to execute arbitrary code by planting attacker-cont… |
CVE-2026-19590 | High | 7.3 | 2026-09-01 | OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hoo… |
CVE-2026-82649 | | | 2026-08-30 | SiYuan Windows installer before version 3.8.1 (affected versions >= 2.0.14) contains an uncontrolled search path element vulnerability in its NSIS installer, w… |
CVE-2026-65093 | Critical | 9.9 | 2026-08-25 | NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape. A successful exploit of this vulnerability might lead to co… |
CVE-2026-55015 | Medium | 5.5 | 2026-08-20 | Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally. |
CVE-2026-55013 | High | 7.1 | 2026-08-20 | Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally. |
CVE-2026-59781 | High | 7.8 | 2026-08-18 | When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access… |
CVE-2026-50773 | High | 7.8 | 2026-08-17 | An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file. |
CVE-2026-56090 | High | 7.3 | 2026-08-17 | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could po… |
CVE-2026-0294 | High | 7.8 | 2026-08-13 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code… |
CVE-2026-16860 | Critical | 9.9 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element. |
CVE-2025-54512 | | | 2026-08-11 | A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulti… |
CVE-2026-34175 | | | 2026-08-11 | Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation o… |
CVE-2026-32788 | | | 2026-08-11 | Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an esca… |
CVE-2026-28700 | | | 2026-08-11 | Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged softwar… |
CVE-2025-8087 | | | 2026-08-11 | A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, pote… |
CVE-2025-48506 | | | 2026-08-11 | Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulti… |
CVE-2025-0041 | | | 2026-08-11 | Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrar… |
CVE-2026-13133 | | | 2026-08-10 | A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secu… |
CVE-2026-9169 | High | 8.8 | 2026-08-07 | DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the app… |
CVE-2026-66344 | Medium | 6.7 | 2026-08-05 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Path Element vulnerability (CWE-427). An authenticated attack… |
CVE-2026-18657 | High | 7.8 | 2026-08-04 | An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a mal… |
CVE-2026-18656 | High | 7.8 | 2026-08-04 | An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated actor to execute arbitrary code via a ma… |
CVE-2026-18718 | High | 7.0 | 2026-08-03 | Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a… |
CVE-2026-18605 | High | 7.0 | 2026-08-03 | A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mi… |
CVE-2026-9593 | Medium | 6.7 | 2026-08-03 | A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted fi… |
CVE-2026-48388 | High | 8.6 | 2026-07-28 | Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context… |
CVE-2026-8164 | High | 7.3 | 2026-07-28 | Uncontrolled Search Path Element vulnerability in ArkSigner Software and Hardware Industry and Trade Inc. ArkSigner Desktop Client allows Search Order Hijackin… |
CVE-2026-16519 | High | 7.3 | 2026-07-24 | A
DLL hijacking vulnerability exists in the GeoVision GV-IP Device Utility
desktop application. The application loads one or more dynamic-link libraries
(DLLs)… |
CVE-2026-21770 | Medium | 6.5 | 2026-07-17 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application wi… |
CVE-2026-5674 | High | 8.8 | 2026-07-16 | A flaw was found in PipeWire, a multimedia server. This vulnerability allows an attacker to escape sandboxed applications, such as Flatpak, by exploiting PipeW… |
CVE-2026-42936 | High | 7.8 | 2026-07-15 | The installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking the affected installer, arb… |
CVE-2026-48272 | High | 7.8 | 2026-07-14 | Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the cur… |
CVE-2026-0487 | High | 8.4 | 2026-07-14 | SAProuter on Microsoft Windows allows an unauthenticated attacker to load library (DLL) files from an untrusted location, allowing them to execute malicious co… |
CVE-2026-48364 | High | 8.2 | 2026-07-13 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution… |
CVE-2026-48363 | High | 8.2 | 2026-07-13 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution… |
CVE-2026-15515 | High | 7.0 | 2026-07-13 | A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects some unknown processing in the library qmudisk64.sys of the… |
CVE-2026-57239 | High | 8.2 | 2026-07-08 | The user-controllable executable files will be directly executed by high-privilege processes, allowing low-privilege users to have the opportunity to elevate t… |
CVE-2026-56437 | High | 7.8 | 2026-07-08 | Uncontrolled search path element issue exists in Pupsman versions prior to 3.9.0. If a crafted DLL file is placed in the same folder as the affected installer… |
CVE-2026-38972 | High | 7.8 | 2026-07-02 | Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibr… |
CVE-2026-54672 | High | 7.8 | 2026-06-30 | electron-updater allows for automatic updates for Electron apps. Prior to 26.15.0, AppImage targets built by app-builder-lib could use an empty path component… |
CVE-2025-13162 | Medium | 4.4 | 2026-06-23 | Uncontrolled Search Path Element vulnerability in ABB Control Builder A, ABB 800xA for Advant Master.
This issue affects Control Builder A: through 1.4/4; 800… |
CVE-2026-54232 | High | 8.8 | 2026-06-22 | vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack t… |
CVE-2026-49241 | High | 8.8 | 2026-06-22 | The Angular Language Service VS Code Extension provides a rich editing experience for Angular templates. Prior to 21.2.4, the client-side Angular Language Serv… |
CVE-2026-6645 | | | 2026-06-22 | An insecure process execution vulnerability exists in the pc-printer-updater.exe component of the PaperCut Print Deploy Client for Windows. The application, wh… |
CVE-2026-11958 | | | 2026-06-18 | Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and prior. An attacker with prior access to t… |
CVE-2026-12003 | | | 2026-06-16 | To allow builds of Python to be run from an in-tree layout (rather than
an installed file layout), the VPATH variable is defined at build time
and used to loca… |
CVE-2024-22451 | Medium | 6.7 | 2026-06-16 | Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vu… |
CVE-2024-22447 | Medium | 6.7 | 2026-06-16 | Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnera… |
CVE-2026-5064 | | | 2026-06-15 | Potential security vulnerabilities have been identified in the HP One
Agent for certain HP PC products, which might allow
for escalation of pri… |
CVE-2026-50100 | High | 7.8 | 2026-06-15 | Multiple printer drivers provided by Ricoh Company, Ltd. and KONICA MINOLTA JAPAN, INC. contain a privilege escalation vulnerability. If this vulnerability is… |
CVE-2026-11967 | | | 2026-06-12 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading a malicious DLL located in the same directo… |
CVE-2026-11879 | | | 2026-06-12 | MobaXterm Personal Edition (Portable), in its 26.3 version (Build 5154), allows arbitrary code execution by loading malicious DLLs from a temporary directory t… |
CVE-2026-53813 | High | 7.8 | 2026-06-11 | OpenClaw before 2026.4.25 contains a path traversal vulnerability in memory-core artifact loading where workspace state influences local package root resolutio… |
CVE-2026-7870 | High | 8.8 | 2026-06-11 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled c… |
CVE-2026-10847 | High | 7.8 | 2026-06-11 | A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated local user may be able to execute arbitra… |
CVE-2026-8637 | High | 7.8 | 2026-06-10 | A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authenticated user to exec… |
CVE-2026-47937 | High | 7.7 | 2026-06-09 | Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary… |
CVE-2026-41567 | High | 7.2 | 2026-06-05 | Moby is an open source container framework. In versions prior to 29.5.1 and in moby/moby v2 prior to v2.0.0-beta.14, when a compressed archive is uploaded to a… |
CVE-2026-50033 | High | 7.3 | 2026-06-03 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.932… |
CVE-2026-44682 | High | 7.3 | 2026-06-03 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.932… |
CVE-2026-44609 | High | 7.3 | 2026-06-03 | Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.932… |
CVE-2026-36574 | High | 7.8 | 2026-06-03 | A DLL hijacking vulnerability in Wassimulator (GitHub) CactusViewer v2.3.0 allows attackers to escalate privileges and execute arbitrary code via a crafted DLL. |
CVE-2026-44358 | High | 8.2 | 2026-05-28 | Espressif Shared GitHub DangerJS is a reusable GitHub Action CI DangerJS workflow for Espressif GitHub projects. Prior to 1.0.1, the action's entrypoint.sh inv… |
CVE-2026-47274 | Medium | 6.3 | 2026-05-27 | pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb helper tools resolved external binaries thr… |
CVE-2023-52945 | High | 7.8 | 2026-05-27 | Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbit… |
CVE-2025-41670 | High | 7.8 | 2026-05-27 | A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related file… |
CVE-2025-14575 | | | 2026-05-19 | An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a… |
CVE-2026-32323 | High | 7.3 | 2026-05-19 | Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation durin… |
CVE-2026-47092 | High | 7.8 | 2026-05-18 | Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by m… |
CVE-2024-36333 | High | 7.8 | 2026-05-15 | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execut… |
CVE-2026-7373 | | | 2026-05-15 | Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host. When started the… |
CVE-2025-62628 | | | 2026-05-14 | Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arb… |
CVE-2024-47091 | High | 7.8 | 2026-05-13 | Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a… |
CVE-2026-44612 | High | 7.8 | 2026-05-13 | Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directo… |
CVE-2026-20772 | Medium | 6.7 | 2026-05-12 | Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications ma… |
CVE-2025-36515 | | | 2026-05-12 | Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unpr… |
CVE-2025-35969 | | | 2026-05-12 | Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escala… |
CVE-2026-45004 | High | 7.8 | 2026-05-11 | OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() du… |
CVE-2025-69599 | Critical | 9.8 | 2026-05-08 | RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disp… |
CVE-2026-44406 | Medium | 5.7 | 2026-05-07 | ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enabl… |
CVE-2026-40004 | Medium | 5.5 | 2026-05-07 | There exists an openssl.cnf privilege escalation vulnerability in ZTE Cloud PC client uSmartview. An attacker can execute arbitrary code locally and escalate p… |
CVE-2026-21661 | | | 2026-05-06 | An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths.
This is… |
CVE-2026-6788 | High | 7.8 | 2026-05-06 | Uncontrolled Search Path Element vulnerability in WatchGuard Agent on Windows allows Using Malicious Files. |
CVE-2026-25852 | Medium | 6.7 | 2026-04-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212. |