CVE-2018-18629

An issue was discovered in the Keybase command-line client before 2.8.0-20181023124437 for Linux. An untrusted search path vulnerability in the keybase-redirector application allows a local, unprivileged user on Linux to gain root privileges via a Trojan horse binary...

CVE-2018-7365

CVE-2018-7365 affects ZTE uSmartView prior to and including v5.01.05. The root cause is an untrusted search path, which may allow an unauthorized user to perform unauthorized operations. Public documents provided do not specify exploit details or confirmed in-the-wild use. Depending on the source...

CVE-2018-0692

CVE-2018-0692 concerns an untrusted search path vulnerability in Baidu Browser, where Baidu Browser 43.23.1000.500 and earlier can be exploited via a Trojan horse DLL located in an unspecified directory, enabling privilege escalation and arbitrary code execution with the caller’s privileges. Conn...

CVE-2018-0623

CVE-2018-0623 corresponds to a DLL search path (CWE-427) vulnerability in multiple Yayoi 17 Series products from Yayoi Co., Ltd. The flaw arises from insecure handling of DLL loading (msjet49.dll) in the affected applications, allowing an attacker to gain privileges via a Trojan horse DLL placed ...

CVE-2018-0656

The CVE-2018-0656 entry concerns the Digital Paper App installer (v1.4.0.16050 and earlier). A DLL search-path vulnerability (untrusted search path) exists in the installer, allowing privilege elevation by placing a Trojan horse DLL in an unspecified directory. Affected component: the installer f...

CVE-2018-0619

Untrusted search path vulnerability in the installer of Glarysoft Glary Utilities Glary Utilities 5.99 and earlier and Glary Utilities Pro 5.99 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0621

CVE-2018-0621 affects LOGICOOL CONNECTION UTILITY SOFTWARE prior to 2.30.9. The issue is an untrusted search path (CWE-427) that can enable privilege escalation via a malicious DLL in an unspecified directory. CNVD-2019-19054 confirms the vulnerable versions and impact; JVN entries corroborate th...

Microsoft OneDrive untrustworthy search path vulnerability

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program features automatic backup of photo albums, online office and file sharing. An untrustworthy search path vulnerability exists in Microsoft OneDrive. An attacker can exploit this vulnerability with a malicious DLL in t...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0593

The CVE-2018-0593 entry affects the Microsoft OneDrive installer, which has an untrusted search path vulnerability (DLL planting) that can allow privilege escalation by placing a Trojan DLL in the installer’s directory. Root cause: insecure DLL search order in the installer. Impact described: arb...

CVE-2018-0594

CVE-2018-0594 describes an untrusted search path (DLL planting) vulnerability in Skype for Windows. The issue allows privilege escalation via a Trojan horse DLL placed in the same directory as the Skype executable. Affected product: Skype for Windows. Root cause: insecure DLL search path (CWE-427...

CVE-2018-0598

The CVE-2018-0598 issue concerns self-extracting archive files created by IExpress bundled with Microsoft Windows. Affected component is the IExpress self-extracting archive mechanism, where an untrusted search path can lead to DLL planting and privilege escalation by loading a Trojan horse DLL f...

CVE-2018-0561

CVE-2018-0561 affects the SecureBrain PhishWall Client Internet Explorer edition installer (version 3.7.15 and earlier). The issue is an untrusted search path (CWE-427) in the installer that can be exploited to gain privileges via a Trojan horse DLL placed in an unsafe directory. Exploitation wou...

CVE-2018-0540

Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2018-0540

CVE-2018-0540 affects ViX 2.21.148.0, with an untrusted search path vulnerability that can allow privilege escalation by a Trojan horse DLL located in an unspecified directory (CWE-427). Public sources (JPN/JVN records and CNVD) describe the issue as insecure DLL loading in ViX, potentially enabl...

CVE-2018-0543

JTrim 1.53c and earlier installers are affected by an untrusted/search path DLL loading vulnerability (CWE-427). An attacker could place a Trojan horse DLL in the directory to gain privileges on user invocation. Affected component: the JTrim installer; root cause is insecure DLL search path. Impa...

CVE-2018-0515

CVE-2018-0515 affects the installer of “FLET'S Azukeru Backup Tool” (versions up to 1.5.2.6). The root cause is an insecure DLL search path in the installer, which may allow arbitrary code execution with the user’s privileges. The vulnerability has been addressed in version 1.5.2.7 (2017-05-11). ...

CVE-2018-0516

The CVE-2018-0516 issue concerns the FLET’S v4 / v6 address selection tool, where an untrusted DLL search path can allow an attacker to load a Trojan horse DLL from an insecure directory. The root cause is a DLL search path vulnerability (CWE-427) in the application/installer. The documented impa...

Design/Logic Flaw

Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...