CWE-427 · Uncontrolled Search Path Element (page 5)
Page 5 of 13 — CVEs classified under CWE-427, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-49592 | Medium | 6.7 | 2024-11-15 | Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path… |
CVE-2024-38668 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to pote… |
CVE-2024-38387 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalati… |
CVE-2024-38383 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially… |
CVE-2024-37024 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some ACAT software maintained by Intel(R) for Windows before version 3.11.0 may allow an authenticated user to potentially enable… |
CVE-2024-36253 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2024-36245 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable esc… |
CVE-2024-35245 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path element in some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially… |
CVE-2024-34167 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potenti… |
CVE-2024-34165 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path in some Intel(R) oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of p… |
CVE-2024-34164 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2024-34028 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before version 2024.1.0.142, graphics driver 31.0… |
CVE-2024-31407 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software before version 24.1 may all… |
CVE-2024-28952 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation o… |
CVE-2024-28950 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially… |
CVE-2024-28881 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escal… |
CVE-2024-26017 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation o… |
CVE-2024-23312 | Medium | 6.7 | 2024-11-13 | Uncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially e… |
CVE-2024-2208 | High | 8.8 | 2024-11-12 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow esca… |
CVE-2024-2207 | Medium | 6.0 | 2024-11-12 | Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow esca… |
CVE-2024-47942 | High | 7.3 | 2024-11-12 | A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 9). The affected applications suffer from a DLL hijacking vulnerability… |
CVE-2024-10389 | High | 7.5 | 2024-11-04 | There exists a Path Traversal vulnerability in Safearchive on Platforms with Case-Insensitive Filesystems (e.g., NTFS). This allows Attackers to Write Arbitrar… |
CVE-2024-50583 | Medium | 6.3 | 2024-10-25 | Whale browser Installer before 3.1.0.0 allows an attacker to execute a malicious DLL in the user environment due to improper permission settings. |
CVE-2024-48605 | High | 7.8 | 2024-10-22 | An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file. |
CVE-2024-10093 | High | 7.8 | 2024-10-17 | A vulnerability, which was classified as critical, was found in VSO ConvertXtoDvd 7.0.0.83. Affected is an unknown function in the library avcodec.dll of the f… |
CVE-2024-10068 | High | 7.8 | 2024-10-17 | A vulnerability was found in OpenSight Software FlashFXP 5.4.0.3970. It has been classified as critical. Affected is an unknown function in the library libcryp… |
CVE-2024-49391 | High | 7.3 | 2024-10-17 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. |
CVE-2024-49390 | High | 7.3 | 2024-10-17 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before build 9.0.0x24. |
CVE-2024-45710 | High | 7.8 | 2024-10-16 | SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and l… |
CVE-2024-30117 | Low | 2.5 | 2024-10-14 | A dynamic search for a prerequisite library could allow the possibility for an attacker to replace the correct file under some circumstances. |
CVE-2024-9046 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo stARstudio that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-4132 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Lock Screen that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-4131 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Emulator that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-4130 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-4089 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Super File that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-33582 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Service Framework that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-33581 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo PC Manager AI intelligent scenario that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-33580 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-33579 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Baiying that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-33578 | High | 7.8 | 2024-10-11 | A DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges. |
CVE-2024-47196 | Medium | 6.7 | 2024-10-08 | A vulnerability has been identified in ModelSim (All versions < V2025.2), Questa (All versions < V2025.2). vsimk.exe in affected applications allows a specific… |
CVE-2024-47195 | Medium | 6.7 | 2024-10-08 | A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). gdb.exe in affected applications allows a specific e… |
CVE-2024-47194 | Medium | 6.7 | 2024-10-08 | A vulnerability has been identified in ModelSim (All versions < V2024.3), Questa (All versions < V2024.3). vish2.exe in affected applications allows a specific… |
CVE-2024-45246 | High | 7.3 | 2024-10-06 | Diebold Nixdorf – CWE-427: Uncontrolled Search Path Element |
CVE-2024-6769 | Medium | 6.7 | 2024-09-26 | A DLL Hijacking caused by drive remapping combined with a poisoning of the activation cache in Microsoft Windows 10, Windows 11, Windows Server 2016, Windows S… |
CVE-2024-44168 | Medium | 5.5 | 2024-09-17 | A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app ma… |
CVE-2024-8766 | Medium | 6.7 | 2024-09-16 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38… |
CVE-2024-34016 | Medium | 6.5 | 2024-09-16 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38… |
CVE-2024-34153 | Medium | 6.7 | 2024-09-16 | Uncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of pri… |
CVE-2024-39613 | Medium | 5.3 | 2024-09-16 | Mattermost Desktop App versions <=5.8.0 fail to specify an absolute path when searching the cmd.exe file, which allows a local attacker who is able to put an… |
CVE-2024-20430 | High | 7.3 | 2024-09-12 | A vulnerability in Cisco Meraki Systems Manager (SM) Agent for Windows could allow an authenticated, local attacker to execute arbitrary code with elevated pri… |
CVE-2024-6510 | High | 7.8 | 2024-09-12 | Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking. |
CVE-2024-8441 | Medium | 6.7 | 2024-09-10 | An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privilege… |
CVE-2024-44107 | High | 8.8 | 2024-09-10 | DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their p… |
CVE-2024-45405 | Medium | 6.0 | 2024-09-06 | `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior to version 0.10.11, `gi… |
CVE-2024-7834 | High | 7.8 | 2024-09-04 | A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on l… |
CVE-2024-34019 | High | 7.3 | 2024-08-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. |
CVE-2024-34017 | High | 7.3 | 2024-08-29 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 4569. |
CVE-2024-5929 | High | 7.8 | 2024-08-21 | VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalat… |
CVE-2024-7886 | High | 7.8 | 2024-08-16 | A vulnerability has been found in Scooter Software Beyond Compare up to 3.3.5.15075 and classified as critical. Affected by this vulnerability is an unknown fu… |
CVE-2024-29015 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation o… |
CVE-2024-28953 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local acc… |
CVE-2024-28887 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2024-28876 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2024-28172 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable es… |
CVE-2024-28046 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2024-26027 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalatio… |
CVE-2024-24977 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially… |
CVE-2024-23909 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privi… |
CVE-2024-23907 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable esca… |
CVE-2024-23491 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalatio… |
CVE-2024-23489 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2024-22376 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to… |
CVE-2024-22184 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enab… |
CVE-2024-21857 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of p… |
CVE-2024-21784 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of… |
CVE-2024-21769 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of priv… |
CVE-2024-21766 | Medium | 6.7 | 2024-08-14 | Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable esca… |
CVE-2023-31348 | High | 7.3 | 2024-08-13 | A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
CVE-2024-7061 | Medium | 5.5 | 2024-08-07 | Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta Verify for Windows version 5.0.2. To re… |
CVE-2024-5290 | High | 8.8 | 2024-08-07 | An issue was discovered in Ubuntu wpa_supplicant that resulted in loading of arbitrary shared objects, which allows a local unprivileged attacker to escalate p… |
CVE-2024-7326 | High | 7.8 | 2024-07-31 | A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3. This affects an unknown part in the library RTL120.BPL of the… |
CVE-2024-7325 | High | 7.8 | 2024-07-31 | A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library… |
CVE-2024-7324 | High | 7.8 | 2024-07-31 | A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionali… |
CVE-2024-37142 | High | 7.3 | 2024-07-31 | Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnera… |
CVE-2024-37127 | High | 7.8 | 2024-07-31 | Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnera… |
CVE-2024-32857 | High | 7.3 | 2024-07-31 | Dell Peripheral Manager, versions prior to 1.7.6, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulner… |
CVE-2024-41817 | High | 7.0 | 2024-07-29 | ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty… |
CVE-2024-7193 | Medium | 5.3 | 2024-07-29 | A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library tak_deco_lib.dll of… |
CVE-2024-39820 | Medium | 6.6 | 2024-07-15 | Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a d… |
CVE-2024-38330 | High | 7.0 | 2024-07-08 | IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious act… |
CVE-2024-1182 | High | 7.0 | 2024-07-04 | Uncontrolled Search Path Element vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.3… |
CVE-2024-39708 | High | 7.0 | 2024-06-28 | An issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. Sometimes, a non-administr… |
CVE-2024-34116 | High | 7.1 | 2024-06-13 | Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature… |
CVE-2024-37130 | High | 7.3 | 2024-06-11 | Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking. A local low-privilege… |
CVE-2024-5509 | High | 7.8 | 2024-06-06 | Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb… |
CVE-2024-5292 | High | 7.8 | 2024-05-23 | D-Link Network Assistant Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privi… |
CVE-2024-22379 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Intel(R) Inspector software before version 2024.0 may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2024-21862 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially… |
CVE-2024-21861 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of priv… |