← Back
CWE-427

1,189 CVEs • Abstraction: Base

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

JSON object

Loading...

CVEs (1,189)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Jun 17, 2026
Nov 15, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable...Show more
Trial installer for McAfee Total Protection (legacy trial installer software) 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only affects execution of this installer, and does not leave McAfee Total Protection in a vulnerable state after installation is completed. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.Show less
1Intel
1Quartus Prime
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
7.8 HIGH· v3
N/A· v2
Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access.
1Intel
1Quartus Prime
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
7.8 HIGH· v3
N/A· v2
Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path for some ACAT software maintained by Intel(R) for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
1Intel
1Server Debug And Provisioning Tool
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
7.8 HIGH· v3
N/A· v2
Uncontrolled search path in the Intel(R) SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access.
1Intel
3Oneapi Base Toolkit
System Bring Up ToolkitVtune Profiler
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path element in some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path for the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path in some Intel(R) oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enabl...Show more
Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before version 2024.1.0.142, graphics driver 31.0.101.5445 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of...Show more
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less
1Intel
2Integrated Performance Primitives
Oneapi Base Toolkit
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 13, 2024
5.4 MEDIUM· v4
6.7 MEDIUM· v3
N/A· v2
Uncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
-
Jun 17, 2026
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updat...Show more
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.Show less
-
-
Jun 17, 2026
Nov 12, 2024
N/A· v4
6.0 MEDIUM· v3
N/A· v2
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updat...Show more
Potential vulnerabilities have been identified in the audio package for certain HP PC products using the Sound Research SECOMN64 driver, which might allow escalation of privilege. Sound Research has released driver updates to mitigate the potential vulnerabilities.Show less