CVE-2025-0459

CVE-2025-0459 affects libretro RetroArch up to version 1.19.1 on Windows. The vulnerability concerns the profapi.dll in the Startup component, where manipulation leads to an untrusted search path and requires a local attacker to exploit. The issue is described across multiple sources (Red Hat, SU...

CVE-2025-0459

A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll of the component Startup. The manipulation leads to untrusted search path. An attack has to be...

PT-2025-1290 · Adobe · Photoshop

Name of the Vulnerable Software and Affected Versions: Adobe Photoshop versions 25.12, 26.1 and earlier Description: The issue is related to an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment...

PT-2025-3895 · Libretro · Retroarch

Name of the Vulnerable Software and Affected Versions: libretro RetroArch versions up to 1.19.1 Description: A problematic issue has been found in the library profapi.dll of the component Startup, leading to an untrusted search path. The manipulation requires a local attack approach. The vendor w...

Adobe Photoshop 25.x < 25.12.1 / 26.x < 26.2 Multiple Vulnerabilities (macOS APSB25-02)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 25.12.1/26.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-02 advisory. - Integer Underflow Wrap or Wraparound CWE-191 potentially leading to Arbitrary code execution...

Ivanti EPM 安全漏洞

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from a code execution vulnerability that stems from the inclusion of an unrestricted resource search path. An attacker could exploit this vulnerability to achieve remote code execution...

Adobe Photoshop 代码问题漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to cause arbitrary code to be...

Adobe Photoshop 25.x < 25.12.1 / 26.x < 26.2 Multiple Vulnerabilities (APSB25-02)

The version of Adobe Photoshop installed on the remote Windows host is prior to 25.12.1/26.2. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb25-02 advisory. - Integer Underflow Wrap or Wraparound CWE-191 potentially leading to Arbitrary code execution CVE-2025-211...

The vulnerability of the INF-file utility for Intel chipset and circuit boards, known as the Intel Chipset INF Utility (previously called Intel Chipset Device Software or Intel Chipset Software Installation Utility), is related to an uncontrolled search path element. This allows a malicious user to gain elevated privileges.

The vulnerability of the INF-file utility for Intel chipset and circuit boards is related to an uncontrolled search path element. Exploiting this vulnerability can allow a hacker to gain increased privileges...

The vulnerability of the Intel MPI Library’s parallel programming library, related to an uncontrolled element in the search process, allows attackers to increase their privileges.

The vulnerability of the Intel MPI Library, which is related to parallel programming, lies in its uncontrolled search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

K000149184: Python vulnerabilities CVE-2022-26488, CVE-2019-16056, and CVE-2019-5010

Security Advisory Description CVE-2022-26488 In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must...

PT-2025-54207

Name of the Vulnerable Software and Affected Versions GNU Unrtf versions 0.21.10 Description A flaw exists in the src/path.c component of GNU Unrtf that can lead to a Denial of Service DoS. The issue is due to a NULL pointer dereference triggered by a crafted payload injected into the search path...

Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element

Overview Trend Micro Incorporated has released the security updates for Deep Security 20.0 Agent for Windows that contains a fix for an uncontrolled search path element vulnerability CWE-427, CVE-2024-55955. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the...

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool lies in the use of an unreliable search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Veeam Agent for Microsoft Windows data backup tool is related to the use of an unreliable search path. Exploiting this vulnerability allows attackers to execute arbitrary code by introducing malicious DLL libraries...

BIT-NODE-MIN-2023-23920

An untrusted search path vulnerability exists in Node.js. 19.6.1, 18.14.1, 16.19.1, and 14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its use of an unreliable search path, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to the use of an unreliable search path. Exploiting this vulnerability allows a hacker to execute arbitrary code...

The vulnerability of the Veritas NetBackup software for backup and data restoration operations, related to an uncontrolled search path element, allows attackers to escalate their privileges and execute arbitrary commands.

The vulnerability of the Veritas NetBackup backup and recovery software relates to an uncontrolled element of the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary commands by loading malicious DLL libraries...

CVE-2024-11454

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized...

CVE-2024-11454

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized...

CVE-2024-11454 Untrusted Search Path vulnerability in Autodesk Revit

A maliciously crafted DLL file, when placed in the same directory as an RVT file could be loaded by Autodesk Revit, and execute arbitrary code in the context of the current process due to an untrusted search patch being utilized...