CVE-2026-69328: Untrusted Search Path

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

PT-2026-87891

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

PT-2026-88312

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

CVE-2026-77827: Unquoted Search Path or Element

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...

CVE-2026-72980: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-81192: Untrusted Search Path

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-76199: Uncontrolled Search Path Element

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

PT-2026-88446

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Resources.Host versions prior to 1.16.0-beta.2 Description An untrusted search path issue exists on macOS. The host.id resource attribute detector executes the sh and ioreg binaries using their bare names instead of absolute path...

PT-2026-88630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uncontrolled search path element in the CredentialProvider allows a local attacker to execute arbitrary code outside the sandbox via a local program on Windows systems. Recommendatio...

Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (macOS APSB26-130)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could...

Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (APSB26-130)

The version of Adobe Photoshop installed on the remote Windows host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in...

The vulnerability of the Prisma Access Agent, a user remote access agent for corporate resources and applications, stems from an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Prisma Access Agent, a user remote access agent, relates to an uncontrolled element of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the use of an unreliable search path, allowing attackers to elevate their privileges to the root level.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of the Silabs CP210x VCP virtual COM port driver lies in its uncontrolled search path, which allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Silabs CP210x VCP virtual COM port driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App lies in the use of an unreliable search path, allowing attackers to escalate their privileges.

The vulnerability of the software for providing secure remote access to data in the Palo Alto Networks GlobalProtect App is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2026-14673

An untrusted search path vulnerability in PostgreSQL's amcheck module allows a user with EXECUTE privileges to escalate privileges or execute arbitrary code. By setting a malicious search path before invoking an amcheck function, an attacker can hijack execution to run arbitrary SQL functions wit...

ms-365-mcp-server-PoC

ms-365-mcp-server: security advisory CVE status: reques...

NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

Two NLTK sites executed the Graphviz dot program by bare name, so process creation resolved it via the search path — and on Windows via the current working directory — rather than a validated absolute location. An attacker who can place a file named dot where resolution looks the CWD on Windows, ...

GHSA-6HWM-XVPH-95VM NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary

Two NLTK sites executed the Graphviz dot program by bare name, so process creation resolved it via the search path — and on Windows via the current working directory — rather than a validated absolute location. An attacker who can place a file named dot where resolution looks the CWD on Windows, ...

CVE-2026-9633

A security issue exists within the Redundancy Module Configuration Tool. The RM3ConfigTool.exe binary searches directories in the system path for a required DLL, and one or more of these directories may be writable by standard non-administrator users due to incorrect default permissions. If a loc...