Lucene search
+L

9045 matches found

OSV
OSV
added 2026/01/14 8:31 p.m.13 views

CVE-2026-23512 SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp

SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, there is a Untrusted Search Path vulnerability when Advanced Options setting is trigger. The application executes notepad.exe without specifying an absolute path when using the Advanced Options setting. On Windows, this allows...

8.6CVSS7.7AI score
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/01/14 7:25 p.m.11 views

CVE-2026-21280

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

8.6CVSS7.7AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/14 6:22 p.m.9 views

CVE-2026-20943

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

7CVSS7.3AI score0.00661EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/14 12:00 a.m.19 views

PT-2026-2956

Name of the Vulnerable Software and Affected Versions SumatraPDF versions 3.5.2 and earlier Description SumatraPDF is a multi-format reader for Windows. A flaw exists due to an Untrusted Search Path when the Advanced Options setting is triggered. The application executes notepad.exe without...

8.6CVSS6.9AI score0.00222EPSS
SaveExploits1References10
Tenable Nessus
Tenable Nessus
added 2026/01/14 12:00 a.m.7 views

Adobe Illustrator < 29.8.4 / 30.0 < 30.1 Multiple Vulnerabilities (APSB26-03)

The version of Adobe Illustrator installed on the remote Windows host is prior to 29.8.4, 30.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-03 advisory. - Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability th...

8.6CVSS6.4AI score0.00252EPSS
SaveExploits0References3
GithubExploit
GithubExploit
added 2026/01/13 10:52 p.m.225 views

Exploit for Uncontrolled Search Path Element in Checkmk

CVE-2024-0...

8.8CVSS7.1AI score0.00332EPSS
SaveExploits5
NVD
NVD
added 2026/01/13 7:16 p.m.14 views

CVE-2026-21280

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

8.6CVSS0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 7:16 p.m.9 views

CVE-2026-21280

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

8.6CVSS6.3AI score0.00252EPSS
SaveExploits0References1
CVE
CVE
added 2026/01/13 6:41 p.m.52 views

CVE-2026-21280

Adobe Illustrator 29.8.3, 30.0 and earlier are affected by CVE-2026-21280, an Untrusted Search Path vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the attacker must entice the victim to open a malicious file, and...

8.6CVSS7.3AI score0.00252EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/01/13 6:41 p.m.35 views

CVE-2026-21280 Illustrator | Untrusted Search Path (CWE-426)

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

8.6CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/13 6:41 p.m.6 views

CVE-2026-21280 Illustrator | Untrusted Search Path (CWE-426)

Illustrator versions 29.8.3, 30.0 and earlier are affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses a search path to locate critical resources such as programs, an attacker could modify that...

8.6CVSS7.3AI score0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2026/01/13 6:16 p.m.10 views

CVE-2026-20943

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

7CVSS5.9AI score0.00661EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/13 6:16 p.m.9 views

CVE-2026-20943

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

7CVSS0.00661EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/13 5:56 p.m.6 views

CVE-2026-20943

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

7CVSS5.7AI score0.00661EPSS
SaveExploits0References2Affected Software5
Microsoft CVE
Microsoft CVE
added 2026/01/13 4:00 p.m.13 views

Microsoft Office Click-To-Run Remote Code Execution Vulnerability

Untrusted search path in Microsoft Office allows an unauthorized attacker to execute code locally...

7CVSS5.7AI score0.00661EPSS
SaveExploits0
AstraLinux
AstraLinux
added 2026/01/13 2:01 p.m.6 views

Astra Linux – Vulnerability in pgbouncer

In PgBouncer, the untrusted search path in the authquery connection handler before version 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication through a malicious searchpath parameter in the StartupMessage...

8.1CVSS6AI score0.00364EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.6 views

PT-2026-2744

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An issue exists in Microsoft Office where an untrusted search path can allow an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...

7CVSS5.6AI score0.00661EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/01/13 12:00 a.m.15 views

PT-2026-2776

Name of the Vulnerable Software and Affected Versions Illustrator versions 29.8.3 through 30.0 Description Illustrator versions 29.8.3 through 30.0 are subject to an Untrusted Search Path issue that may lead to arbitrary code execution with the privileges of the current user. This occurs when the...

8.6CVSS6.4AI score0.00252EPSS
SaveExploits0References9
RedhatCVE
RedhatCVE
added 2026/01/09 12:41 p.m.9 views

CVE-2023-25143

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products...

9.8CVSS8AI score0.01742EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:25 a.m.12 views

CVE-2021-28955

git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations most often seen on Windows...

9.8CVSS7.1AI score0.01719EPSS
SaveExploits0References1
Rows per page
Query Builder