194 matches found
CVE-2025-43553 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...
CVE-2025-20015: Uncontrolled Search Path Element
Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-23177: Uncontrolled Search Path Element
CWE-427: Uncontrolled Search Path Element...
The vulnerability of the Microsoft Visual Studio software development tool, related to an uncontrolled search path element, allows a hacker to escalate their privileges.
The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2025-25003: Uncontrolled Search Path Element
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-24998: Uncontrolled Search Path Element
Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally...
CVE-2024-10930
An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges...
CVE-2025-1223: Uncontrolled Search Path Element
An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac...
CVE-2025-24039: Uncontrolled Search Path Element
Visual Studio Code Elevation of Privilege Vulnerability...
CVE-2025-21206: Uncontrolled Search Path Element
Visual Studio Installer Elevation of Privilege Vulnerability...
CVE-2024-45710
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...
CVE-2025-21127: Uncontrolled Search Path Element
Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of...
CVE-2024-49592
Trial installer for McAfee Total Protection legacy trial installer software 16.0.53 allows local privilege escalation because of an Uncontrolled Search Path Element. The attacker could be "an adversary or knowledgeable user" and the type of attack could be called "DLL-squatting." The issue only...
CVE-2024-35245: Uncontrolled Search Path Element
Uncontrolled search path element in some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated user to potentially enable escalation of privilege via local access...
Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40) (macOS)
The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...
Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40)
The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...
CVE-2024-45710: Uncontrolled Search Path Element
SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...
Siemens Questa and ModelSim
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
CVE-2024-45246
CVE-2024-45246 concerns Diebold Nixdorf Vynamic View Console with an Uncontrolled Search Path Element (CWE-427). Public sources indicate affected versions are prior to 5.9.5 (CNNVD) and that the issue could enable arbitrary code execution and privilege escalation. The CNNVD description additional...
