PT-2022-4545

Name of the Vulnerable Software and Affected Versions Intel XTU versions prior to 7.3.0.33 Description The issue is related to an uncontrolled search path element in the Intel XTU software. This could potentially allow an authenticated user to escalate their privileges via local access...

Intel® XTU Advisory

Summary: A potential security vulnerability in the Intel® Extreme Tuning Utility XTU software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-22139 Description: Uncontrolled search path in the...

Adobe Creative Cloud < 2.5 Multiple Vulnerabilities (APSB21-41) (macOS)

The version of Adobe Creative Cloud installed on the remote macOS host is prior to 2.5. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-41 advisory. - Adobe Creative Cloud Desktop Application installer version 2.4 and earlier is affected by an Uncontrolled Searc...

CVE-2021-42743: Uncontrolled Search Path Element

A misconfiguration in the node default path allows for local privilege escalation from a lower privileged user to the Splunk user in Splunk Enterprise versions before 8.1.1 on Windows...

CVE-2022-28714: Uncontrolled Search Path Element

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, as well as F5 BIG-IP APM Clients 7.x versions prior to 7.2.1.5, a DLL Hijacking vulnerability exists in...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to an uncontrolled search path element, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

PT-2022-18910

Name of the Vulnerable Software and Affected Versions Adobe Acrobat Reader DC versions 22.001.2011x and earlier Adobe Acrobat Reader DC versions 20.005.3033x and earlier Adobe Acrobat Reader DC versions 17.012.3022x and earlier Description The issue is related to an uncontrolled search path...

多款Adobe产品代码问题漏洞

Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Acrobat Reader is a PDF viewer. An uncontrolled search path vulnerability exists in multiple Adobe products that can be exploited by an attacker to cause a local elevation of privilege...

CVE-2022-24765: Uncontrolled Search Path Element

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28541

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission...

CVE-2022-28541

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission...

CVE-2022-28541

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission...

CVE-2022-28779

Uncontrolled search path element vulnerability in Samsung Android USB Driver windows installer program prior to version 1.7.50 allows attacker to execute arbitrary code...

CVE-2022-28541

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission...

CVE-2022-28541

CVE-2022-28541 describes an Uncontrolled search path element vulnerability in Samsung Update, affecting versions prior to 3.0.77.0. The flaw allows local attackers with Samsung Update permission to execute arbitrary code. No exploit details, affected platforms, nor fixed versions are provided bey...

Samsung Update 代码问题漏洞

Samsung Update Samsung Update Manager is a special upgrade tool for Samsung computers launched by Samsung Samsung in South Korea. The software is mainly used for the installation and upgrade of Samsung-related software, drivers and firmware. A security vulnerability exists in Samsung Update...

PT-2022-19227

Name of the Vulnerable Software and Affected Versions Samsung Android USB Driver versions prior to 1.7.50 Description The issue is related to an uncontrolled search path element vulnerability in the Samsung Android USB Driver windows installer program. This vulnerability allows an attacker to...

CVE-2022-28541: Improper Limitation of a Pathname to a Restricted Directory

Uncontrolled search path element vulnerability in Samsung Update prior to version 3.0.77.0 allows attackers to execute arbitrary code as Samsung Update permission...

PT-2022-19071

Name of the Vulnerable Software and Affected Versions Samsung Update versions prior to 3.0.77.0 Description The issue allows attackers to execute arbitrary code with Samsung Update permissions due to an uncontrolled search path element vulnerability. Recommendations For versions prior to 3.0.77.0...