PT-2025-6640 · Intel · Intel Mpi Library

Name of the Vulnerable Software and Affected Versions: IntelR MPI Library for Windows versions prior to 2021.13 Description: The issue concerns an uncontrolled search path in some IntelR MPI Library for Windows software. This could potentially allow an authenticated user to enable escalation of...

PT-2025-6633

Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology software versions prior to 2.2.0 Description The issue is related to an uncontrolled search path in some IntelR QuickAssist Technology software. This could potentially allow an authenticated user to enable...

PT-2025-6648 · Intel · Intel High Level Synthesis Compiler

Name of the Vulnerable Software and Affected Versions: IntelR High Level Synthesis Compiler versions prior to 24.2 Description: The issue is related to an uncontrolled search path in some IntelR High Level Synthesis Compiler software. This may allow an authenticated user to potentially enable...

PT-2025-6683 · Intel · Intel Server M50Fcp

Name of the Vulnerable Software and Affected Versions: IntelR Server M50FCP family versions prior to R01.02.0002 Description: The issue is related to an uncontrolled search path element in some BIOS and System Firmware Update Packages. This could potentially allow a privileged user to enable...

CVE-2022-1824

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary co...

CVE-2022-4956

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2024-7325

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The...

CVE-2024-7326

A vulnerability classified as critical has been found in IObit DualSafe Password Manager 1.4.0.3. This affects an unknown part in the library RTL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

CVE-2024-7324

A vulnerability was found in IObit iTop Data Recovery Pro 4.4.0.687. It has been declared as critical. Affected by this vulnerability is an unknown functionality in the library madbasic.bpl of the component BPL Handler. The manipulation leads to uncontrolled search path. Local access is required ...

CVE-2024-10068

A vulnerability was found in OpenSight Software FlashFXP 5.4.0.3970. It has been classified as critical. Affected is an unknown function in the library libcrypto-11.dll of the file FlashFXP.exe. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The exploi...

CVE-2024-10093

A vulnerability, which was classified as critical, was found in VSO ConvertXtoDvd 7.0.0.83. Affected is an unknown function in the library avcodec.dll of the file ConvertXtoDvd.exe. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been...

CVE-2024-9491

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9493

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-45710

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

The vulnerability of the Adobe Photoshop graphic editor lies in its uncontrolled search path, which allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a hacker to execute arbitrary code...

CVE-2024-9496

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9498

CVE-2024-9498 affects the USBXpress SDK installer, where an uncontrolled search path enables DLL hijacking. This can lead to privilege escalation and arbitrary code execution when the impacted installer runs. Exploitation details are not provided in the connected documents. Remediation/fix detail...

CVE-2024-9494

CVE-2024-9494 concerns a DLL hijacking vulnerability in the CP210 VCP Win 2k installer caused by an uncontrolled search path. The affected component is the installer for Silicon CP210 VCP Win 2k, with impact described as privilege escalation and arbitrary code execution when running the impacted ...

CVE-2024-9493 Uncontrolled search path can lead to DLL hijacking in ToolStick installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the ToolStick installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9490

CVE-2024-9490 concerns DLL hijacking due to an uncontrolled search path in Silicon Labs (8‑bit) IDE installer. The vulnerability allows privilege escalation and arbitrary code execution when running the impacted installer. Affected software is the Silicon Labs IDE installer (8‑bit). Root cause is...