CVE-2025-0459

A vulnerability, which was classified as problematic, has been found in libretro RetroArch up to 1.19.1 on Windows. Affected by this issue is some unknown functionality in the library profapi.dll of the component Startup. The manipulation leads to untrusted search path. An attack has to be...

CVE-2024-21857

Uncontrolled search path for some IntelR oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-7193

A vulnerability has been found in Mp3tag up to 3.26d and classified as problematic. This vulnerability affects unknown code in the library takdecolib.dll of the component DLL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-36071

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path...

CVE-2024-31201

A “CWE-428: Unquoted Search Path or Element” affects the ThermoscanIPScrutation service. Such misconfiguration could be abused in scenarios where incorrect permissions were assigned to the C:\ path to attempt a privilege escalation on the local machine...

CVE-2024-8441

An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM...

CVE-2024-26027

Uncontrolled search path for some IntelR Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21831

Uncontrolled search path in some IntelR Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21772

Uncontrolled search path in some IntelR Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21862

Uncontrolled search path in some IntelR QuartusR Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21774

Uncontrolled search path in some IntelR Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21843

Uncontrolled search path for some IntelR Computing Improvement Program software before version 2.4.0.10654 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21788

Uncontrolled search path in some IntelR GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21861

Uncontrolled search path in some IntelR GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21841

Uncontrolled search path for some IntelR Distribution for GDB software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21814

Uncontrolled search path for some IntelR Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21818

Uncontrolled search path in some IntelR PCM software before version 202311 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21777

Uncontrolled search path in some IntelR QuartusR Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21837

Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...