CVE-2022-26488

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...

PT-2022-7666 · Python · Python

Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.10.3 Python versions 3.7.x through 3.7.12 Python versions 3.8.x through 3.8.12 Python versions 3.9.x through 3.9.10 Python versions 3.10.x through 3.10.2 Description: The issue is related to the inadequate security ...

Remote Code Execution (RCE)

kate is vulnerable to remote code execution. The vulnerability exists due to an untrusted Search Path...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

Design/Logic Flaw

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22943

CVE-2022-22943 affects VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0, where an uncontrolled search path element can be leveraged by a local administrator in the Windows guest to run code with SYSTEM privileges. The issue is attributed to insufficient/unspecified path handling in VMwa...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

Foxit PhantomPDF < 10.1.7 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 10.1.7. It is, therefore affected by multiple vulnerabilities: - Acrobat Reader DC version 21.007.20099 and earlier, 20.004.30017 and earlier and 17.011.30204 and...

PT-2022-2232 · Vmware +1 · Vmware Tools +1

Name of the Vulnerable Software and Affected Versions: VMware Tools for Windows versions 10.x.y through 11.x.y prior to 12.0.0 Description: The issue is related to an uncontrolled search path vulnerability in VMware Tools for Windows. A malicious actor with local administrative privileges in the...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 are related to an uncontrolled search path element, which allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to uncontrolled search path elements. Exploiting these...

VMSA-2022-0007:VMware Tools for Windows update addresses an uncontrolled search path vulnerability

Advisory ID: VMSA-2022-0007 CVSSv3 Range: 5.6 Issue Date:2022-03-01 Updated On: 2022-03-01 Initial Advisory CVEs: CVE-2022-22943 Synopsis: VMware Tools for Windows update addresses an uncontrolled search path vulnerability CVE-2022-22943 RSS Feed Download PDF Download Text File Share this page on...

FreeBSD : Qt5 -- QProcess unexpected search path (43ae57f6-92ab-11ec-81b4-2cf05d620ecc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43ae57f6-92ab-11ec-81b4-2cf05d620ecc advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execu...

Adobe Creative Cloud Desktop Uncontrolled Search Path Element Vulnerability

Adobe Creative Cloud Desktop Application is a suite of applications from Adobe for managing applications and services in the Creative Cloud Member Management Center. The application supports synchronizing and sharing files, managing fonts, and accessing a library of assets for commercial...

CVE-2022-23202

Adobe Creative Cloud Desktop version 2.7.0.13 and earlier is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a...

Path traversal

Adobe Creative Cloud Desktop version 2.7.0.13 and earlier is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a...

CVE-2022-23202 Adobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code execution

Adobe Creative Cloud Desktop version 2.7.0.13 and earlier is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a...

CVE-2022-23202 Adobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code execution

Adobe Creative Cloud Desktop version 2.7.0.13 and earlier is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must download a...

CVE-2022-23202

CVE-2022-23202 affects Adobe Creative Cloud Desktop 2.7.0.13 and earlier. The issue is an Uncontrolled Search Path Element that could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must download a malicious DLL and place it in...