Intel AI for Enterprise Retrieval-augmented Generation code issue vulnerabilities

Intel AI for Enterprise Retrieval-augmented Generation is a technology framework for enhancing the accuracy and relevance of Large Language Model LLM responses by incorporating an external knowledge base. An uncontrolled search path vulnerability exists in Intel AI for Enterprise...

Zoom Workplace VDI < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of...

Zoom Workplace < 6.3.10 Vulnerability (ZSB-25030)

The version of Zoom Workplace installed on the remote host is prior to 6.3.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25030 advisory. - Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege...

PT-2025-32755 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver software affected versions not specified Description: An uncontrolled search path in some IntelR Graphics Driver software may allow an authenticated user to potentially escalate privileges via local access...

CVE-2025-20048: Uncontrolled Search Path Element

Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-32900 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler is affected by an uncontrolled search path element issue that may lead to arbitrary code execution with current user privileges. An attacker could manipulate...

CVE-2025-49457: Untrusted Search Path

Untrusted search path in certain Zoom Clients for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2025-49571: Uncontrolled Search Path Element

Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...

CVE-2025-26404: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20092: Uncontrolled Search Path Element

Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Zoom Clients for Windows security vulnerabilities

Zoom Clients for Windows is a video conferencing software from Zoom, Inc. A security vulnerability exists in Zoom Clients for Windows that originates from an untrusted search path and could result in elevated privileges...

PT-2025-32711 · Intel · Intel(R) Driver & Support Assistant Tool

Name of the Vulnerable Software and Affected Versions: IntelR Driver & Support Assistant Tool versions prior to 24.6.49.8 Description: An uncontrolled search path element in the IntelR Driver & Support Assistant Tool software may allow an authenticated user to potentially escalate privileges via...

Intel oneAPI Toolkits code-related vulnerabilities

Intel oneAPI Toolkits is a set of core tools and libraries from Intel Corporation USA. It is used to develop high-performance, data-centric applications across different architectures. A code issue vulnerability exists in Intel oneAPI Toolkits that stems from an uncontrolled search path that coul...

PT-2025-32703 · Unknown · Clock Jitter Tool

Name of the Vulnerable Software and Affected Versions: Clock Jitter Tool versions prior to 6.0.1 Description: An uncontrolled search path issue exists in some Clock Jitter Tool software. This issue may allow an authenticated user to potentially escalate privileges via local access. Recommendation...

Intel Driver & Support Assistant Tool code-related vulnerabilities

Intel Driver & Support Assistant Tool is a software program from Intel Corporation USA that is used to automatically detect, download and install drivers. A code issue vulnerability exists in Intel Driver & Support Assistant Tool versions prior to 24.6.49.8, which stems from an uncontrolled searc...

Intel Tiber Edge Platform Edge Orchestrator code-related vulnerabilities

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics Driver that stems from an uncontrolled search path that could lead to elevation of privilege...

PT-2025-32692 · Intel · Intel Oneapi Toolkit

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Toolkit and component software affected versions not specified Description: An uncontrolled search path exists in some IntelR oneAPI Toolkit and component software installers. This may allow an authenticated user to potentially...

K000152931: Multiple PostgreSQL vulnerabilities

Security Advisory Description CVE-2023-2455 Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other...

Elastic Beats filebeat < 8.18.6 / 8.19.x < 8.19.3 / 9.0.x < 9.0.6 Privilege Escalation (ESA-2025-12)

The version of Elastic Beats filebeat installed on the remote host is prior to 8.18.6, 8.19.x prior to 8.19.3, or 9.0.x prior to 9.0.6. It is, therefore, affected by a vulnerability as referenced in the ESA-2025-12 advisory. An uncontrolled search path element vulnerability can lead to local...

CVE-2025-53395

Paramount Macrium Reflect through 2025-06-26 allows local attackers to execute arbitrary code with administrator privileges via a crafted .mrimgx backup file and a malicious VSSSvr.dll located in the same directory. When a user with administrative privileges mounts a backup by opening the .mrimgx...