CWE-427 · Uncontrolled Search Path Element (page 3)
Page 3 of 13 — CVEs classified under CWE-427, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-11772 | Medium | 6.6 | 2025-12-01 | A carefully crafted DLL, copied to C:\ProgramData\Synaptics folder, allows a local user to execute arbitrary code with elevated privileges during driver i… |
CVE-2025-64772 | High | 7.8 | 2025-12-01 | The installer of INZONE Hub 1.0.10.3 to 1.0.17.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a… |
CVE-2025-64695 | High | 7.8 | 2025-11-21 | Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privi… |
CVE-2025-13051 | | 2025-11-19 | When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as… | |
CVE-2025-12852 | | 2025-11-19 | DLL Loading vulnerability in NEC Corporation RakurakuMusen Start EX All Verisons allows a attacker to manipulate the PC environment to cause unintended operati… | |
CVE-2025-10089 | High | 7.7 | 2025-11-18 | Uncontrolled Search Path Element Vulnerability in Setting and Operation Application for Lighting Control System MILCO.S Setting Application all versions, MILCO… |
CVE-2025-64726 | | 2025-11-13 | Socket Firewall is an HTTP/HTTPS proxy server that intercepts package manager requests and enforces security policies by blocking dangerous packages. Socket Fi… | |
CVE-2025-40827 | High | 7.8 | 2025-11-11 | A vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). The affected applica… |
CVE-2025-40763 | High | 7.8 | 2025-11-11 | A vulnerability has been identified in Altair Grid Engine (All versions < V2026.0.0). Affected products do not properly validate environment variables when loa… |
CVE-2025-35972 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged s… |
CVE-2025-32038 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3: User Applications… |
CVE-2025-32001 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of pr… |
CVE-2025-31931 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software before version 3.25.4 within Ring 3: User Applications may allow… |
CVE-2025-31647 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege… |
CVE-2025-31645 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privile… |
CVE-2025-30506 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege… |
CVE-2025-30182 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an es… |
CVE-2025-25059 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an e… |
CVE-2025-24842 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Un… |
CVE-2025-24491 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may… |
CVE-2025-20065 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of p… |
CVE-2025-20050 | Medium | 6.7 | 2025-11-11 | Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privileg… |
CVE-2025-23358 | High | 8.2 | 2025-11-04 | NVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successful exploit of this… |
CVE-2025-11761 | High | 7.8 | 2025-11-03 | A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during th… |
CVE-2025-60749 | High | 7.8 | 2025-10-31 | DLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe. |
CVE-2025-61161 | High | 8.4 | 2025-10-29 | DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search path (C:\ProgramData\… |
CVE-2025-62776 | High | 7.8 | 2025-10-29 | The installer of WTW EAGLE (for Windows) 3.0.8.0 contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a… |
CVE-2025-10939 | Low | 3.7 | 2025-10-28 | A flaw was found in Keycloak. The Keycloak guides recommend to not expose /admin path to the outside in case the installation is using a proxy. The issue occur… |
CVE-2025-9164 | | 2025-10-27 | Docker Desktop Installer.exe is vulnerable to DLL hijacking due to insecure DLL search order. The installer searches for required DLLs in the user's Downloads… | |
CVE-2025-11940 | High | 7.0 | 2025-10-19 | A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the compon… |
CVE-2025-10581 | High | 7.8 | 2025-10-15 | A potential DLL hijacking vulnerability was discovered in the Lenovo PC Manager during an internal security assessment that could allow a local authenticated u… |
CVE-2025-26861 | High | 7.8 | 2025-10-15 | RemoteCall Remote Support Program (for Operator) versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed… |
CVE-2025-26860 | High | 7.8 | 2025-10-15 | RemoteCall Remote Support Program (for Operator) versions prior to 5.1.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed… |
CVE-2025-26859 | High | 7.8 | 2025-10-15 | RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same fol… |
CVE-2025-57716 | Medium | 6.7 | 2025-10-14 | An Uncontrolled Search Path Element vulnerability [CWE-427] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a loca… |
CVE-2025-59889 | High | 8.6 | 2025-10-14 | Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the softw… |
CVE-2025-23309 | High | 8.2 | 2025-10-10 | NVIDIA Display Driver contains a vulnerability where an uncontrolled DLL loading path might lead to arbitrary denial of service, escalation of privileges, code… |
CVE-2025-32919 | High | 7.8 | 2025-10-09 | Use of an insecure temporary directory in the Windows License plugin for the Checkmk Windows Agent allows Privilege Escalation. This issue affects Checkmk: fro… |
CVE-2025-62185 | Medium | 6.7 | 2025-10-07 | In Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed for a YouTube link… |
CVE-2025-57781 | High | 7.8 | 2025-10-06 | The installers of DENSO TEN drive recorder viewer contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a… |
CVE-2025-27237 | | 2025-10-03 | In Zabbix Agent and Agent 2 on Windows, the OpenSSL configuration file is loaded from a path writable by low-privileged users, allowing malicious modification… | |
CVE-2025-11223 | High | 7.8 | 2025-10-03 | Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the… |
CVE-2025-23355 | Medium | 6.7 | 2025-10-01 | NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit… |
CVE-2025-59684 | High | 8.8 | 2025-10-01 | DigiSign DigiSigner ONE 1.0.4.60 allows DLL Hijacking. |
CVE-2025-11178 | High | 7.3 | 2025-09-30 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386, Acronis Tr… |
CVE-2025-56383 | High | 8.4 | 2025-09-26 | Notepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputed by multiple parti… |
CVE-2025-9267 | | 2025-09-26 | In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current workin… | |
CVE-2025-9844 | High | 8.8 | 2025-09-23 | Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: bef… |
CVE-2025-1131 | High | 7.8 | 2025-09-23 | A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this scr… |
CVE-2025-57624 | High | 7.8 | 2025-09-16 | A DLL hijacking vulnerability in CYRISMA Agent before 444 allows local users to escalate privileges and execute arbitrary code via multiple DLLs. |
CVE-2025-9201 | High | 7.8 | 2025-09-11 | A potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local user to execute code w… |
CVE-2025-9059 | | 2025-09-11 | The Altiris Core Agent Updater package (AeXNSC.exe) is prone to an elevation of privileges vulnerability through DLL hijacking. | |
CVE-2025-40979 | | 2025-09-10 | DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers wi… | |
CVE-2025-10215 | High | 7.8 | 2025-09-10 | DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by… |
CVE-2025-10214 | High | 7.8 | 2025-09-10 | DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by… |
CVE-2025-10213 | High | 7.8 | 2025-09-10 | DLL search path hijacking vulnerability in the UPDF.exe executable for Windows version 1.8.5.0 allows attackers with local access to execute arbitrary code by… |
CVE-2025-10198 | High | 7.8 | 2025-09-09 | Sunshine for Windows, version v2025.122.141614, contains a DLL search-order hijacking vulnerability, allowing attackers to insert a malicious DLL in user-write… |
CVE-2025-55671 | High | 7.8 | 2025-09-05 | Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with t… |
CVE-2025-9330 | High | 7.8 | 2025-09-02 | Foxit PDF Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalat… |
CVE-2025-8614 | High | 7.8 | 2025-09-02 | NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affect… |
CVE-2025-9016 | High | 7.0 | 2025-08-15 | A vulnerability was identified in Mechrevo Control Center GX V2 5.56.51.48. This affects an unknown part of the file C:\Program Files\OEM\机械革命控制中心\AiStoneServi… |
CVE-2025-9000 | High | 7.0 | 2025-08-15 | A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this vulnerability is an unknown functionality of the component reg File Han… |
CVE-2025-49571 | High | 7.8 | 2025-08-12 | Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code executi… |
CVE-2025-27717 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local acc… |
CVE-2025-26404 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2025-24923 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escal… |
CVE-2025-22838 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially ena… |
CVE-2025-21093 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenticated user to pot… |
CVE-2025-20627 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable esc… |
CVE-2025-20092 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2025-20048 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of… |
CVE-2025-20017 | Medium | 6.7 | 2025-08-12 | Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of… |
CVE-2025-30033 | High | 7.8 | 2025-08-12 | The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an applicat… |
CVE-2025-53395 | High | 7.7 | 2025-08-04 | Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file a… |
CVE-2025-53394 | High | 7.7 | 2025-08-04 | Paramount Macrium Reflect through 2025-06-26 allows attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx or .mrbax backup fi… |
CVE-2025-25011 | High | 7.0 | 2025-07-30 | An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises fro… |
CVE-2025-0712 | High | 7.0 | 2025-07-30 | An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises fro… |
CVE-2025-7676 | | 2025-07-28 | DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL… | |
CVE-2024-13976 | | 2025-07-25 | A DLL injection vulnerability exists in Commvault for Windows 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0. During the installation of maintenance updates… | |
CVE-2025-7427 | Medium | 5.9 | 2025-07-22 | Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could l… |
CVE-2025-1729 | Medium | 6.7 | 2025-07-17 | A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privilege… |
CVE-2025-1700 | High | 7.0 | 2025-07-17 | A DLL hijacking vulnerability was reported in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate pr… |
CVE-2025-7472 | High | 7.5 | 2025-07-17 | A local privilege escalation vulnerability in the Intercept X for Windows installer prior version 1.22 can lead to a local user gaining system level privileges… |
CVE-2025-34109 | | 2025-07-15 | PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validatio… | |
CVE-2025-48496 | Medium | 5.1 | 2025-07-11 | Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of uninte… |
CVE-2025-36004 | High | 8.8 | 2025-06-25 | IBM i 7.2, 7.3, 7.4, and 7.5 could allow a user to gain elevated privileges due to an unqualified library call in IBM Facsimile Support for i. A malicious acto… |
CVE-2025-49144 | High | 7.3 | 2025-06-23 | Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 instal… |
CVE-2025-4981 | Critical | 9.9 | 2025-06-20 | Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to sanitize filenames in the archive extract… |
CVE-2024-24916 | Medium | 6.5 | 2025-06-19 | Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin). |
CVE-2025-5981 | Medium | 6.5 | 2025-06-18 | Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container ima… |
CVE-2025-49487 | Medium | 6.8 | 2025-06-17 | An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could have allowed an attacker with physical a… |
CVE-2025-49158 | Medium | 6.7 | 2025-06-17 | An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installa… |
CVE-2025-49155 | High | 8.8 | 2025-06-17 | An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to a… |
CVE-2025-33122 | High | 7.5 | 2025-06-17 | IBM i 7.2, 7.3, 7.4, 7.5, and 7.6 could allow a user to gain elevated privileges due to an unqualified library call in IBM Advanced Job Scheduler for i. A mali… |
CVE-2025-49148 | High | 7.3 | 2025-06-11 | ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search orde… |
CVE-2025-5480 | High | 7.8 | 2025-06-06 | Action1 Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2025-30167 | High | 7.3 | 2025-06-03 | Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRA… |
CVE-2024-42191 | Medium | 6.5 | 2025-05-30 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a COM hijacking vulnerability which could allow an attacker to modify or replace the application wi… |
CVE-2024-42190 | Medium | 6.5 | 2025-05-30 | HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which could allow an attacker to modify or replace the application wi… |
CVE-2025-5180 | High | 7.0 | 2025-05-26 | A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the l… |