CVE-2026-9169: Uncontrolled Search Path Element

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placing a malicious DLL in a user-controlled directory listed in the PATH environment variable, which the SDK traverses when a...

CVE-2026-38972: Uncontrolled Search Path Element

Notepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The application calls LoadLibraryL"MSFTEDIT.DLL" with a bare DLL name, which allows a local attacker to place a malicious MSFTEDIT.DLL in the application directory or...

CVE-2026-22561: Uncontrolled Search Path Element

Uncontrolled search path elements in Anthropic Claude for Windows installer Claude Setup.exe versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs e.g., profapi.dll from its own directory after UAC elevation, enabling arbitrary code...

CVE-2026-4255: Inclusion of Functionality from Untrusted Control Sphere

A DLL search order hijacking vulnerability in Thermalright TR-VISION HOME on Windows 64-bit allows a local attacker to escalate privileges via DLL side-loading. The application loads certain dynamic-link library DLL dependencies using the default Windows search order, which includes directories...

CVE-2021-31853

DLL Search Order Hijacking Vulnerability in McAfee Drive Encryption MDE prior to 7.3.0 HF2 7.3.0.183 allows local users to execute arbitrary code and escalate privileges via execution from a compromised folder...

CVE-2023-53937: Uncontrolled Search Path Element

Hubstaff 1.6.14 contains a DLL search order hijacking vulnerability that allows attackers to replace a missing system32 wow64log.dll with a malicious library. Attackers can generate a custom DLL using Metasploit and place it in the system32 directory to obtain a reverse shell during application...

EUVD-2020-28439

Malware in sbrugna...

EUVD-2020-25870

Malware in sbrugna...

EUVD-2019-13281

Malware in sbrugna...

EUVD-2019-13302

Malware in sbrugna...

EUVD-2018-10623

Malware in sbrugna...

EUVD-2019-1847

Malware in sbrugna...

EUVD-2019-13222

Malware in sbrugna...

EUVD-2021-18728

Malware in sbrugna...

EUVD-2019-13248

Malware in sbrugna...

EUVD-2022-46001

Malicious code in bioql PyPI...

EUVD-2023-48579

Malicious code in bioql PyPI...

EUVD-2024-54374

Malicious code in bioql PyPI...

EUVD-2021-7510

Malicious code in bioql PyPI...

CVE-2025-40979: Uncontrolled Search Path Element

DLL search order hijacking vulnerability in the wave.exe executable for Windows 11, version 1.27.8. Exploitation of this vulnerability could allow attackers with local access to execute arbitrary code by placing an arbitrary file in the 'C:\Users \AppData\Local\Temp' directory, which could lead t...