CVE-2025-4539

A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2025-4532

A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunloginguard.exe. The manipulation leads to uncontrolled search path. Local access is required to...

Adobe Substance3D code issues and vulnerabilities

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

CVE-2024-31073: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel oneAPI Level Zero code issue vulnerabilities

Intel oneAPI Level Zero is an underlying heterogeneous computing interface standard from Intel Corporation USA that provides direct hardware access to Intel GPUs/FPGAs. A code issue vulnerability exists in Intel oneAPI Level Zero that stems from an uncontrolled search path that could lead to loca...

CVE-2025-35471: Uncontrolled Search Path Element

conda-forge openssl-feedstock before 066e83c 2024-05-20, on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary co...

CVE-2025-0035: Unquoted Search Path or Element

Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2024-36321: Unquoted Search Path or Element

Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...

CVE-2025-20108: Uncontrolled Search Path Element

Uncontrolled search path element for some IntelR Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20079: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20043: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20041: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Graphics software for IntelR Arc™ graphics and IntelR IrisR Xe graphics before version 32.0.101.6325/32.0.101.6252 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015: Uncontrolled Search Path Element

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47800: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-47795: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-46895: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39833: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-43553: Uncontrolled Search Path Element

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...

PT-2025-20935 · Amd · Amd Cloud Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Cloud Manageability Service affected versions not specified Description: The issue is related to an unquoted search path within the AMD Cloud Manageability Service, which can be exploited by a local attacker to escalate privileges. This...

AMD AIM-T Manageability Service security vulnerability

AMD AIM-T Manageability Service is an industrial-grade remote device management service from UltraMicroelectronics AMD that supports edge computing node operations and maintenance. A security vulnerability exists in AMD AIM-T Manageability Service, which stems from an unquoted search path that...