CWE-427
1,189 CVEs • Abstraction: Base
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
CVEs (1,189)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Intel 2Oneapi Base Toolkit Vtune ProfilerJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 2Integrated Performance Primitives Oneapi Base ToolkitJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 2Mpi Library Oneapi Hpc ToolkitJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.3 HIGH· v3 N/A· v2 Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 2Oneapi Hpc Toolkit Trace Analyzer And CollectorJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.3 HIGH· v3 N/A· v2 Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 1Graphics Performance Analyzers Jun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 1Simics Package Manager Jun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 1License Manager For Flexim Jun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 1Field Programmable Gate Array Software Development Kit For Opencl Jun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 3High Level Synthesis Compiler Oneapi Dpc++/c++ CompilerQuartus PrimeJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 2Distribution For Gdb Oneapi Base ToolkitJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.3 HIGH· v3 N/A· v2 Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
1Intel 2Integrated Performance Primitives Cryptography Oneapi Base ToolkitJun 17, 2026 Aug 14, 2024 5.4 MEDIUM· v4 7.8 HIGH· v3 N/A· v2 Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access. |
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. |
Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta Verify for Windows version 5.0.2. To remediate this vulnerability, upgrade to 5.0.2 or greater. |