CVE-2024-24697

CVE-2024-24697 affects Zoom Windows clients with 32‑bit binaries, due to an untrusted search path that enables local privilege escalation for an authenticated user. Public references indicate affected Zoom products include Zoom Desktop/VDI and Zoom Client for Meetings; remediation is to update to...

CVE-2024-24697 Zoom Clients - Untrusted Search Path

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access...

PT-2024-1875 · Intel · Intel(R) Sur For Gameplay

Name of the Vulnerable Software and Affected Versions: IntelR SUR for Gameplay Software versions prior to 2.0.1901 Description: The issue is related to an uncontrolled search path in the Intel System Usage Report software, which may allow a privileged user to potentially enable escalation of...

PT-2024-1881 · Intel · Intel Ssu

Name of the Vulnerable Software and Affected Versions: IntelR SSU versions prior to 3.0.0.2 Description: The issue is related to an uncontrolled search path element in the Intel System Support Utility. This could allow an authenticated user to potentially enable escalation of privilege via local...

PT-2024-2741 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 8.0.8.1001 Description: The issue is related to an uncontrolled search path element in some IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2024-2697 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.4 Description: The issue is related to an uncontrolled search path in the Intel Binary Configuration Tool software. This may allow an authenticated user to potentially enable escalation of...

PT-2024-1773 · Intel · Ispc

Name of the Vulnerable Software and Affected Versions: IntelR ISPC software versions prior to 1.21.0 Description: The issue is related to an uncontrolled search path element in the Implicit SPMD Program Compiler ISPC software. This could potentially allow an authenticated user to escalate their...

PT-2024-2684 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to the fixed version Description: The issue is related to an untrusted search path in some Zoom 32-bit Windows clients. This allows an authenticated user to conduct an escalation of privilege via local access...

PT-2024-1911 · Intel · Intel Mpi Library

Name of the Vulnerable Software and Affected Versions: IntelR MPI Library Software versions prior to 2021.11 Description: The issue is related to an uncontrolled search path in the IntelR MPI Library Software, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2024-3266 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to an uncontrolled search path element in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to...

PT-2024-1874 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10577 Description: The issue is related to an uncontrolled search path in some IntelR CIP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Trend Micro Apex One Multiple Vulnerabilities (000293322)

According to its self-reported version, the Trend Micro application running on the remote Windows host is Apex One prior to SP1 Server Build 12033 and Agent Build 12033. It is, therefore, affected by multiple vulnerabilities: - Untrusted search path vulnerabilities in the Trend Micro Apex One and...

ROS-20240212-01

A vulnerability in the PKCS11 function of the ssh-agent component of the OpenSSH cryptographic security tool is related to the following the use of an insecure search path. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code. remotely to execute...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path due to the improper handling of the .be TEMP folder. An attacker can escalate privileges by monitoring the user's TEMP folder for changes and inserting a malicious DLL into the .be/.Local folder immediately when th...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path due to the improper handling of the .be TEMP folder. An attacker can escalate privileges by monitoring the user's TEMP folder for changes and inserting a malicious DLL into the .be/.Local folder immediately when th...

Untrusted Search Path

Yarn is vulnerable to Untrusted Search Path. The vulnerability is caused due to improper validation before constructing a file path within the validate method in child.js .This could allow an attacker to execute malicious commands in unexpected ways if the attacker tricks a user into executing...

Yarn untrusted search path vulnerability

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...

CVE-2021-4435

An untrusted search path vulnerability was found in Yarn. When a victim runs certain Yarn commands in a directory with attacker-controlled content, malicious commands could be executed in unexpected ways...