3727 matches found
postgresql: postgresql: Privilege escalation via uncontrolled search path in extension management
A flaw was found in PostgreSQL. An uncontrolled search path issue in extension management allows an authenticated user with database-level CREATE privileges to execute arbitrary code as the database superuser. By altering schemas or specifying crafted schema names during extension installation or...
CVE-2025-69599
CVE-2025-69599 author: Rafael José Núñez Gulías company: Iberian Var Group Affected products: RayVentory Scan Engine 12.6 Update 8 and previous versions Raynet advisory: RSEC200965 rvia in Raynet is vulnerable to an Uncontrolled Search Path Element issue. When loading shared objects and calling...
CVE-2025-27237
CVE-2025-27237 Local privilege escalation vulnerability in Zabbix Agent/Agent2 for Windows via OpenSSL configuration file hijacking. Overview Field| Value ---|--- CVE ID| CVE-2025-27237 CVSS v4.0| 7.3 HIGH CWE| CWE-427: Uncontrolled Search Path Element Type| Local Privilege Escalation Vendor|...
CVE-2026-40626
Uncontrolled search path for some IntelR Wireless BluetoothR software for Windows within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-40626
Uncontrolled search path for some IntelR Wireless BluetoothR software for Windows within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
EUVD-2026-121652
Uncontrolled search path for some IntelR Wireless BluetoothR software for Windows within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This resul...
CVE-2026-40626
Some Intel(R) Wireless Bluetooth(R) software for Windows contains an uncontrolled search path vulnerability (CWE-427) within Ring 3: User Applications. An unprivileged software adversary with authenticated access may leverage a high-complexity attack requiring active user interaction to achieve e...
CVE-2026-57884
Uncontrolled search path for some IntelR Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2026-57884
Some Intel(R) Graphics Software versions prior to 26.14.2303.1 are vulnerable to an uncontrolled search path within Ring 3: User Applications. This flaw may allow an unprivileged software adversary with authenticated access to achieve an escalation of privilege via a high-complexity local attack ...
CVE-2026-57884
Uncontrolled search path for some IntelR Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2026-56438
Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially...
CVE-2026-56438
Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially...
EUVD-2026-121320
Uncontrolled search path for some IntelR Application Optimization User Interface within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result...
CVE-2026-20798
Some Intel(R) Graphics Driver software installers are vulnerable to an uncontrolled search path within Ring 3. This flaw allows an unprivileged software adversary with authenticated user access to potentially achieve local code execution and escalation of privilege via a high-complexity attack. T...
EUVD-2026-121288
Uncontrolled search path for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may...
CVE-2026-20798
Uncontrolled search path for some IntelR Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may...
CVE-2026-0776
CVE-2026-0776 - Discord Client Uncontrolled Search Path Element Summary This repository documents CVE-2026-0776, a local code execution issue affecting the Discord Desktop Client on Windows. The vulnerability is related to unsafe module resolution behavior in Node.js-based components, which may...
EUVD-2026-120463
The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability. A low-privileged, authenticated local attacker could potentially leverage this vulnerability to execute arbitrary code with SYSTEM privileges...
Intel® Application Optimization User Interface Software Advisory
Summary: A potential security vulnerability for some Intel® Application Optimization User Interface software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-46632 Description: Uncontrolled sear...
CVE-2026-57884: n/a Intel(R) Graphics Software: Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User…
Uncontrolled search path for some IntelR Graphics Software before version 26.14.2303.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...