CVE-2025-30248

CVE-2025-30248 involves DLL hijacking in the WD Discovery Installer for Western Digital WD Discovery on Windows (version 5.2.730). A local attacker can execute arbitrary code by placing a crafted DLL in the installer’s search path. The relevant connected sources confirm the vulnerable component i...

EUVD-2025-206380

DLL hijacking in the WD Discovery Installer in Western Digital WD Discovery 5.2.730 on Windows allows a local attacker to execute arbitrary code via placement of a crafted dll in the installer's search path...

Altera Quartus Prime Pro 安全漏洞

Altera Quartus Prime Pro is an FPGA design software from Altera Corporation, USA. A security vulnerability exists in Altera Quartus Prime Pro versions 24.1 through 24.3.1, which originates from the presence of an uncontrolled search path element in the Windows installer, which could lead to searc...

CVE-2025-23358

CVE-2025-23358 affects NVIDIA NVApp for Windows. The vulnerability is a flaw in the NVIDIA NVApp installer that can manipulate a search path element, potentially enabling code execution and privilege escalation on a local attacker’s host. Multiple connected sources confirm the issue and its impac...

NVIDIA NVApp 代码问题漏洞

NVIDIA NVApp is a graphics card control center from NVIDIA Corporation. A code issue vulnerability exists in NVIDIA NVApp that stems from a search path element issue in the installer that could lead to code execution and elevation of privilege...

CVE-2022-31467

A DLL hijacking vulnerability in the installed for Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, leading to execution of arbitrary code, via the installer not restricting the search path for required DLLs and then not verifying the signature...

The vulnerability of the Intel SNMP Subagent Stand-Alone software lies in its uncontrolled search path in the installer, which allows a malicious actor to increase their privileges.

The vulnerability of the Intel SNMP Subagent Stand-Alone software is related to an uncontrolled element in the search process within the installer. Exploiting this vulnerability can allow attackers to enhance their privileges...