PT-2022-2344

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop version 2.7.0.13 and earlier Description The issue is related to an uncontrolled search path element in the Adobe Creative Cloud Desktop Application, which could allow an attacker to execute arbitrary code in the...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges within the system using a specially crafted file...

CVE-2021-44463: Uncontrolled Search Path Element

Missing DLLs, if replaced by an insider, could allow an attacker to achieve local privilege escalation on the DeltaV Distributed Control System Controllers and Workstations All versions when some DeltaV services are started...

CVE-2022-0129

Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library DLL gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process wa...

CVE-2022-0129

Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library DLL gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process wa...

CVE-2022-0129

CVE-2022-0129 affects McAfee TechCheck prior to 4.0.0.2. The vulnerability is an uncontrolled search path element allowing a local administrator to load a crafted DLL from the process directory, gaining SYSTEM-level privileges. Root cause: DLLs placed in the executable’s directory are loaded at r...

CVE-2022-0129: Uncontrolled Search Path Element

Uncontrolled search path element vulnerability in McAfee TechCheck prior to 4.0.0.2 allows a local administrator to load their own Dynamic Link Library DLL gaining elevation of privileges to system user. This was achieved through placing the malicious DLL in the same directory that the process wa...

CVE-2021-30360: Uncontrolled Search Path Element

Users have access to the directory where the installation repair occurs. Since the MS Installer allows regular users to run the repair, an attacker can initiate the installation repair and place a specially crafted EXE in the repair folder which runs with the Check Point Remote Access Client...

Uncontrolled Search Path Element

Overview std/syscall is a Go standard library package std/syscall Affected versions of this package are vulnerable to Uncontrolled Search Path Element. Go Vulnerability Report: Untrusted search path vulnerability on Windows related to LoadLibrary allows local users to gain privileges via a...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app, related to an uncontrolled search path element, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an uncontrolled search path element. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

The vulnerability of the RoboHelp software in publishing content related to manuals, policies, and knowledge bases, due to the uncontrolled element of the search path. This vulnerability allows attackers to exploit their privileges.

The vulnerability of the RoboHelp software for publishing content such as help documents, policies, and knowledge bases is related to an uncontrollable element of the search process. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2021-33063

Uncontrolled search path in the IntelR RealSenseTM D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0082

Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0082

Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in the IntelR RealSenseTM D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0082

Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0082

Summary of CVE-2021-0082 : The issue affects Intel® PROSet/Wireless WiFi and Killer™ WiFi software on Windows 10. It is described as an Uncontrolled search path in the software installer , which may allow an authenticated user to potentially escalate privileges via local access. The Red Hat/Intel...

CVE-2021-33063

Uncontrolled search path in the IntelR RealSenseTM D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-12895

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi versions affected versions not specified Description: The issue is related to an uncontrolled search path in the software installer for IntelR PROSet/Wireless WiFi in Windows 10. This may allow an authenticated use...