← Back
CWE-427

1,189 CVEs • Abstraction: Base

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

JSON object

Loading...

CVEs (1,189)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Intel
1Nuc Pro Software Suite
Jun 17, 2026
Jan 19, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access.
2Checkmk
Tribe29
2Checkmk
Checkmk
Jun 17, 2026
Jan 12, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Privilege escalation in jar_signature agent plugin in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows local user to escalate privileges
1Ptc
3Kepware Kepserverex
Thingworx Industrial ConnectivityThingworx Kepware Server
Jun 17, 2026
Jan 10, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
1Ptc
3Kepware Kepserverex
Thingworx Industrial ConnectivityThingworx Kepware Server
Jun 17, 2026
Jan 10, 2024
N/A· v4
7.3 HIGH· v3
N/A· v2
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized versi...Show more
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.Show less
1Zte
1Zxcloud Irai
Jun 17, 2026
Jan 5, 2024
N/A· v4
4.8 MEDIUM· v3
N/A· v2
There is a DLL hijacking vulnerability in ZTE ZXCLOUD iRAI, an attacker could place a fake DLL file in a specific directory and successfully exploit this vulnerability to execute malicious code.
1Lenovo
1Universal Device Client
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
1Zte
1Zxcloud Irai
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
There is an unsafe DLL loading vulnerability in ZTE ZXCLOUD iRAI. Due to the  program  failed to adequately validate the user's input, an attacker could exploit this vulnerability  to escalate local privileges.
1Ibm
1I
Jun 17, 2026
Dec 25, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause arbitrary code to run with the privilege of the u...Show more
Facsimile Support for IBM i 7.2, 7.3, 7.4, and 7.5 could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause arbitrary code to run with the privilege of the user invoking the facsimile support. IBM X-Force ID: 267689.Show less
1Peazip
1Peazip
Jun 17, 2026
Dec 17, 2023
N/A· v4
7.8 HIGH· v3
4.3 MEDIUM· v2
A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulat...Show more
A vulnerability has been found in PeaZip 9.4.0 and classified as problematic. Affected by this vulnerability is an unknown functionality in the library dragdropfilesdll.dll of the component Library Handler. The manipulation leads to uncontrolled search path. An attack has to be approached locally. Upgrading to version 9.6.0 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-248251. NOTE: Vendor was contacted early, confirmed the existence of the flaw and immediately worked on a patched release.Show less
1Checkmk
1Checkmk
Jun 17, 2026
Dec 13, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries
1Beyondtrust
1Privilege Management For Windows
Jun 17, 2026
Dec 12, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.
1Acronis
1Cyber Protect Home Office
Jun 17, 2026
Dec 12, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build...Show more
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.Show less
1Enterprisedb
1Postgres Advanced Server
Jun 17, 2026
Dec 12, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, a...Show more
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against search_path attacks.Show less
1Baidu
1Ttplayer
Jun 17, 2026
Dec 7, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll.
1Ezviz
1Ezviz Studio
Jun 17, 2026
Dec 4, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
EzViz Studio v2.2.0 is vulnerable to DLL hijacking.
1Huddly
1Huddlycameraservice
Jun 17, 2026
Dec 1, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows att...Show more
DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges.Show less
1Netease
1Cloudmusic
Jun 17, 2026
Nov 30, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An Untrusted search path vulnerability in NetEase CloudMusic 2.10.4 for Windows allows local users to gain escalated privileges through the urlmon.dll file in the current working directory.
1Sohu
1Video Player
Jun 17, 2026
Nov 30, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An Untrusted search path vulnerability in Sohu Video Player 7.0.15.0 allows local users to gain escalated privileges through the version.dll file in the current working directory.
1Notepad Plus Plus
1Notepad++
Jun 17, 2026
Nov 30, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
An Untrusted search path vulnerability in notepad++ 6.5 allows local users to gain escalated privileges through the msimg32.dll file in the current working directory.
1Notepad Plus Plus
1Notepad++
Jun 17, 2026
Nov 30, 2023
N/A· v4
7.8 HIGH· v3
4.3 MEDIUM· v2
A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attac...Show more
A vulnerability classified as problematic was found in NotePad++ up to 8.1. Affected by this vulnerability is an unknown functionality of the file dbghelp.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The identifier VDB-246421 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.Show less