CVE-2022-28128

Untrusted search path vulnerability in AttacheCase ver.3.6.1.0 and earlier allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory...

CVE-2022-28128

CVE-2022-28128 affects AttacheCase (HiBARA) up to version 3.6.1.0. The vulnerability arises from untrusted DLL search path handling, enabling a local attacker to load a Trojan horse DLL and gain privileges or execute arbitrary code. Exploitation is described as a local issue with potential for ar...

FreeBSD : Qt5 -- QProcess unexpected search path (43ae57f6-92ab-11ec-81b4-2cf05d620ecc)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 43ae57f6-92ab-11ec-81b4-2cf05d620ecc advisory. - In Qt 5.9.x through 5.15.x before 5.15.9 and 6.x before 6.2.4 on Linux and UNIX, QProcess could execu...

GO-2021-0163 Privilege escalation on Windows via malicious DLL in syscall

Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a malicious DLL in the current working directory...

CVE-2021-32592

FortiClientWindows (7.0.0; 6.4.6 and below; 6.2.x; 6.0.x) and FortiClient EMS (7.0.0; 6.4.6 and below; 6.2.x; 6.0.x) are affected by an unsafe search path vulnerability that enables DLL hijacking via a malicious OpenSSL engine library placed in the search path. This can allow a local attacker to ...

CVE-2021-0082

Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Code injection

An untrusted search path in AMD Radeon settings Installer may lead to a privilege escalation or unauthorized code execution...

CVE-2021-36297

SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dll planting/hijacking, only by a separate administrative action that is not a default part of the SOSInstallerTool.exe installation for executing...

CVE-2021-20793

CVE-2021-20793 affects the installers for Sony Audio USB Driver (V1.10 and earlier) and HAP Music Transfer (V1.3.0 and earlier), due to a DLL search path issue that can cause loading of Trojan DLLs. This untrusted-search-path flaw may allow arbitrary code execution with the privileges of the user...

CVE-2021-28636

Acrobat Reader DC versions 2021.005.20054 and earlier, 2020.004.30005 and earlier and 2017.011.30197 and earlier are affected by an Uncontrolled Search Path Element vulnerability. An attacker with access to the victim's C:/ folder could leverage this vulnerability to achieve arbitrary code...

Creative Cloud Desktop Application 代码问题漏洞

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 2.4 and earlier versions. An attacker can exploit this vulnerability to...

CVE-2021-3464

CVE-2021-3464 affects Lenovo PCManager prior to version 3.0.400.3252, describing a DLL search path vulnerability that could enable privilege escalation. The Red Hat/CNVD/CNNVD variants and NVD record the same affected product/version and root cause as a DLL search path issue, with no exploitation...

The vulnerability of the software installer for Intel Optane DC Persistent Memory, which allows a hacker to enhance their privileges.

The vulnerability of the software installer for Intel Optane DC Persistent Memory, which operates on non-volatile memory, is related to improper handling of the search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

Adobe Prelude 代码问题漏洞

Adobe Prelude is a video recording and capture tool designed for intuitive and efficient media organization and metadata entry, quickly tagging and transcoding video footage and creating rough cuts on the fly. An uncontrolled search path vulnerability exists in Adobe Prelude 9.0.1 and earlier...

CVE-2020-28209

Schneider Electric’s EcoStruxure Building Operation suite is affected by CVE-2020-28209 (CWE-428: Windows Unquoted Search Path). The ICSA-21-063-02 advisory ties this CVE to the Unquoted Search Path vulnerability in the Enterprise Server installer (V1.9–V3.1) and Enterprise Central installer (V2....

CVE-2020-24419

CVE-2020-24419 affects Adobe After Effects 17.1.1 and earlier on Windows, due to an uncontrolled search-path element in the application, enabling arbitrary code execution in the user context after opening a malicious file. The issue requires user interaction. Adobe APSB20-62 documents fixes that ...

CVE-2020-8345

The CVE-2020-8345 issue affects the Lenovo HardwareScan Plugin used by Lenovo Vantage. A DLL search path vulnerability in the plugin before version 1.0.46.11 could allow privilege escalation. Connected sources specify affected component (Lenovo HardwareScan Plugin DLL), root cause (DLL search pat...

CVE-2020-15523

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading...

Design/Logic Flaw

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

Dell Patches SupportAssist Flaw That Allows Arbitrary Code Execution

Dell has patched a high-severity flaw in its SupportAssist software that could allow an attacker to execute arbitrary code with administrator privileges on affected computers. The flaw, an uncontrolled search path vulnerability that is being tracked as CVE-2020-5316, could allow a locally...