CVE-2024-7995

Autodesk VRED Design is affected by CVE-2024-7995, where a maliciously crafted binary file downloaded could exploit an untrusted search path to escalate privileges to NT AUTHORITY/SYSTEM, potentially enabling code execution. The condition is triggered by handling a downloaded binary within the VR...

PT-2024-38744 · Autodesk · Vred Design

Name of the Vulnerable Software and Affected Versions: VRED Design affected versions not specified Description: A maliciously crafted binary file, when downloaded, could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design...

Autodesk VRED Design 安全漏洞

Autodesk VRED Design is a professional 3D visualization software from Autodesk, Inc. A security vulnerability exists in Autodesk VRED Design version 2025, which stems from the use of an untrusted search path, where a maliciously crafted binary file may lead to privilege escalation during download...

Exploit for Untrusted Search Path in Yandex Yandex_Browser

CVE-2024-6473 PoC Yandex Browser for Desktop before 24.7...

SUSE CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

SUSE CVE-2024-8975

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...

The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an unreliable search path, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...

The vulnerability of Intel Quartus Prime Pro’s automated design system lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro automated design systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack on Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack on Windows operating systems is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to gain increased privileges...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...

Adobe Acrobat < 11.0.15 / 15.006.30121 / 15.010.20060 Multiple Vulnerabilities (APSB16-09) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 11.0.15, 15.006.30121, or 15.010.20060. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat a...

Adobe Dreamweaver 20.2.0 < 20.2.1 / 21.0 < 21.1 Information disclosure (APSB21-13) (macOS)

The version of Adobe Dreamweaver installed on the remote macOS host is prior to 20.2.1, 21.1. It is, therefore, affected by a vulnerability as referenced in the APSB21-13 advisory. - Adobe Dreamweaver versions 21.0 and earlier and 20.2 and earlier is affected by an untrusted search path...

Adobe InCopy 15.0.0 < 15.1.4 Arbitrary code execution (APSB21-05)

The version of Adobe InCopy installed on the remote host is prior to 15.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-05 advisory. - InCopy version 15.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitra...

Adobe InDesign 13.0 < 13.1.0 Multiple Vulnerabilities (APSB18-11) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 13.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB18-11 advisory. - Adobe InDesign versions 13.0 and below have an exploitable Memory corruption vulnerability. Successful exploitatio...

Adobe Reader < 15.006.30121 / 15.010.20060 Multiple Vulnerabilities (APSB16-09) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 15.006.30121 or 15.010.20060. It is, therefore, affected by multiple vulnerabilities. - Adobe Reader and Acrobat before 11.0.15, Acrobat and Acrobat Reader DC Classic before 15.006.30121, and Acrobat and Acrobat...

VSO ConvertXtoDvd Code Issue Vulnerability

VSO ConvertXtoDvd is a software from VSO that can convert video to any format. A code issue vulnerability exists in VSO ConvertXtoDvd version 7.0.0.83, which stems from a function avcodec.dll in the file ConvertXtoDvd.exe that results in an uncontrolled search path. No details of the vulnerabilit...

Adobe After Effects < 18.2 Multiple Vulnerabilities (APSB21-33) (macOS)

The version of Adobe After Effects installed on the remote macOS host is prior to 18.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-33 advisory. - After Effects version 18.0 and earlier are affected by an out-of-bounds write vulnerability that could result i...