162 matches found
cve-2026-25676
CVE-2026-25676 Research DLL Search Path Hijacking in M-Track Duo HD Installer Overview This repository contains initial research and a proof-of-concept related to CVE-2026-25676, a DLL search path hijacking vulnerability affecting the installer of M-Track Duo HD 1.0.0. The goal of this project is...
CVE-2026-76199 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...
CVE-2026-76199 Photoshop Desktop | Uncontrolled Search Path Element (CWE-427)
Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...
CVE-2026-76199
Photoshop Desktop is affected by an Uncontrolled Search Path Element (CWE-427) vulnerability that could allow an attacker to achieve arbitrary code execution in the context of the current user. Exploitation requires user interaction , specifically that a victim opens a malicious file. The CVSS 3....
Security Bulletin: IBM i is Affected By Remote Code Execution Vulnerability [CVE-2026-16860]
Summary IBM i is vulnerable to a remote code execution vulnerability due to an uncontrolled search path element CVE-2026-16860 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-16860 DESCRIPTION: IBM i could allow a remote authenticated attacker to execute...
Installer for LINE for Windows insecurely loads Dynamic Link Libraries
Overview The installer for LINE for Windows provided by LY Corporation contains the following vulnerability: Uncontrolled search path element CWE-427 - CVE-2026-13133 The CVSS evaluation above assumes that a victim user is directed to download and place a specially crafted DLL file alongside the...
Installer of OM Workspace (Windows Edition) may insecurely load Dynamic Link Libraries
Overview OM Workspace provided by OM Digital Solutions Corporation is image editing software. Installer of OM Workspace Windows Edition contains the following vulnerability with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element...
Installer of M-Audio M-Track Duo HD may insecurely load Dynamic Link Libraries
Overview The installer of M-Track Duo HD provided by M-Audio contains the following vulnerability with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-25676 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc...
CVE-2021-22775
A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software...
CVE-2020-7474
A CWE-427: Uncontrolled Search Path Element vulnerability exists in ProSoft Configurator v1.002 and prior, for the PMEPXM0100 H module, which could cause the execution of untrusted code when using double click to open a project file which may trigger execution of a malicious DLL...
CVE-2025-57716: Uncontrolled Search Path Element
An Uncontrolled Search Path Element vulnerability CWE-427 in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versions may allow a local low privileged user to perform a DLL hijacking attack via placing a malicious DLL to the FortiClient Online Installer installation folder...
EUVD-2018-1957
Malware in sbrugna...
EUVD-2019-16379
Malware in sbrugna...
EUVD-2021-9910
Malicious code in bioql PyPI...
EUVD-2023-43099
Malicious code in bioql PyPI...
EUVD-2022-37703
Malicious code in bioql PyPI...
CVE-2025-23177
CVE-2025-23177 affects Ribbon Communications Apollo 9608 SBC. Connected sources identify the issue as CWE-427: Uncontrolled Search Path Element, with specific mentions of Apollo 9608 version v9.6R3 being implicated (PT-2025-18181 and CNNVD-202504-3975 align on this version). The Red Hat/NVD/CVE r...
CVE-2025-23177: Uncontrolled Search Path Element
CWE-427: Uncontrolled Search Path Element...
Siemens Questa and ModelSim
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...