CVE-2025-69599

CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...

CVE-2025-27237

CVE-2025-27237 Local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows via OpenSSL configuration file hijacking. Overview Field| Value ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: Uncontrolled Search Path Element Type| Local Privilege Escalation Vendor|...

CVE-2026-0776

CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...

CVE-2026-104349

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-104349 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-104349 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

EUVD-2026-111117

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-104349

Adobe Creative Cloud Desktop for Windows is affected by an Uncontrolled Search Path Element vulnerability (CWE-427 ). A low-privileged attacker could exploit this flaw to achieve arbitrary code execution in the context of the current user by tricking a victim into opening a malicious file. Adobe ...

PT-2026-126676

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

CVE-2026-104349: Uncontrolled Search Path Element

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

Vulnerability related to Adobe Creative Cloud Desktop permission and access control issues

Adobe Creative Cloud Desktop versions 6.10.0.252.41 and earlier contain a permission and access control vulnerability stemming from uncontrolled search path elements. This vulnerability may allow low-privilege attackers to execute arbitrary code when a user interacts with a malicious file...

Adobe Creative Cloud < 6.11 Privilege escalation (APSB26-135)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 6.11. It is, therefore, affected by a vulnerability as referenced in the APSB26-135 advisory. - Uncontrolled Search Path Element CWE-427 potentially leading to Privilege escalation CVE-2026-104349 Note that Nessu...

HP One Agent permission and access control issue vulnerability

Versions of HP One Agent prior to 1.87.4769.0 contain a privilege escalation and access control vulnerability stemming from uncontrolled search path elements, which may lead to privilege escalation and/or arbitrary code execution...

CVE-2026-92202

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2026-92202 Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2026-92202

The Luxion KeyShot software is vulnerable to Remote Code Execution (RCE) due to an uncontrolled search path element during the parsing of BIP files . The flaw occurs because the application loads a library from an unsecured location, which an attacker can exploit to execute arbitrary code in the ...

EUVD-2026-107407

Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Luxion KeyShot. User interaction is required to exploit this vulnerability in that the target mus...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library DLL that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' sectio...

CVE-2026-102438

An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library DLL that is later loaded by a high-privilege process. Refer to the ' Security Update for Armoury Crate App ' sectio...

CVE-2026-102438

The ASUS Armoury Crate application is susceptible to an uncontrolled search path element vulnerability (CWE-427). This flaw allows local users to execute arbitrary code with SYSTEM privileges by replacing a dynamic-link library (DLL) that is subsequently loaded by a high-privilege process. Remedi...