← Back
CWE-426

709 CVEs • Abstraction: Base • Likelihood of Exploit: High

Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

JSON object

Loading...

CVEs (709)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-4901
1National Tax Agency
1E Tax
May 13, 2026
May 22, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in The installer of e-Tax Software all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2016-4900
1Evernote
1Evernote
May 13, 2026
May 22, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2167
1Softbank
1Primedrive Desktop Application
May 13, 2026
May 12, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified di...Show more
Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.Show less
CVE-2017-2157
1Jpki
1The Public Certification Service For Individuals
May 13, 2026
May 12, 2017
N/A· v4
7.3 HIGH· v3
4.4 MEDIUM· v2
Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individ...Show more
Untrusted search path vulnerability in installers for The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier that were available until April 27, 2017 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
CVE-2017-5236
1Rapid7
1Appspider Pro
May 13, 2026
May 3, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of t...Show more
Editions of Rapid7 AppSpider Pro installers prior to version 6.14.060 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.Show less
CVE-2017-2156
1Vivaldi
1Vivaldi Installer For Windows
May 13, 2026
Apr 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in Vivaldi installer for Windows prior to version 1.7.735.48 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVE-2017-2149
1Toshiba
1Flashair
May 13, 2026
Apr 28, 2017
N/A· v4
8.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functiona...Show more
Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Configuration Software V3.0.2 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WE series<W-03>) V3.00.01, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WD/WC series<W-02>) V2.00.03 and earlier, SDHC Memory Card with embedded wireless LAN functionality FlashAir Software Update tool (SD-WB/WL series) V1.00.04 and earlier, SDHC Memory Card with embedded TransferJet functionality Configuration Software V1.02 and earlier, SDHC Memory Card with embedded TransferJet functionality Software Update tool V1.00.06 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
CVE-2017-2130
1Securebrain
1Phishwall Client
May 13, 2026
Apr 28, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer version Ver. 3.7.13 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2108
1Softbank
1Primedrive Desktop Application
May 13, 2026
Apr 28, 2017
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2017-2107
1Akky
17 Zip32.dll
May 13, 2026
Apr 28, 2017
N/A· v4
7.8 HIGH· v3
6.9 MEDIUM· v2
Untrusted search path vulnerability in Self-extracting archive files created by 7-ZIP32.DLL 9.22.00.01 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2016-4846
1Securebrain
1Phishwall Client
May 13, 2026
Apr 21, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2.
CVE-2017-3007
1Adobe
1Creative Cloud
May 13, 2026
Apr 12, 2017
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Cloud desktop applications.
CVE-2017-6189
1Amazon
1Kindle For Pc
May 13, 2026
Mar 15, 2017
N/A· v4
7.3 HIGH· v3
4.4 MEDIUM· v2
Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle...Show more
Untrusted search path vulnerability in Amazon Kindle for PC before 1.19 allows local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL in the current working directory of the Kindle Setup installer.Show less
CVE-2017-2983
1Adobe
1Shockwave Player
May 13, 2026
Mar 14, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege.
CVE-2017-6798
1Trendmicro
1Endpoint Sensor
May 13, 2026
Mar 10, 2017
N/A· v4
7.8 HIGH· v3
9.3 HIGH· v2
Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 2015-0208.
CVE-2017-5235
1Rapid7
1Metasploit
May 13, 2026
Mar 2, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the...Show more
Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.Show less
CVE-2017-5234
1Rapid7
1Insight Collector
May 13, 2026
Mar 2, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the install...Show more
Rapid7 Insight Collector installers prior to version 1.0.16 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.Show less
CVE-2017-5233
1Rapid7
1Appspider Pro
May 13, 2026
Mar 2, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...Show more
Rapid7 AppSpider Pro installers prior to version 6.14.053 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.Show less
CVE-2017-5232
1Rapid7
1Nexpose
May 13, 2026
Mar 2, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the i...Show more
All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer.Show less
CVE-2016-6167
1Putty
1Putty
May 13, 2026
Jan 30, 2017
N/A· v4
7.8 HIGH· v3
4.4 MEDIUM· v2
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current wo...Show more
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory.Show less