PT-2025-46421

Name of the Vulnerable Software and Affected Versions Instrumentation and Tracing Technology API ITT API versions prior to 3.25.4 Description The Instrumentation and Tracing Technology API ITT API software contains an uncontrolled search path issue within Ring 3: User Applications. This may allow...

PT-2025-46427

Name of the Vulnerable Software and Affected Versions Intel oneAPI DPC++C++ Compiler FPGA Support Package versions prior to 2025.0.1 Description An uncontrolled search path issue exists in the FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software. This issue, occurring within Ring ...

Intel Processor Identification Utility 代码问题漏洞

Intel Processor Identification Utility is a processor identification utility from Intel Corporation USA. The program supports the display of graphics information, chipset information, processor supported technologies, and other information. A code issue vulnerability exists in Intel Processor...

Intel Distribution for Python 代码问题漏洞

Intel Distribution for Python is a Python distribution optimized for Intel hardware from Intel Corporation USA. A code issue vulnerability exists in Intel Distribution for Python versions prior to 2025.2.0, which stems from an uncontrolled search path that could lead to elevation of privilege...

PT-2025-46415

Name of the Vulnerable Software and Affected Versions Intel Driver and Support Assistant versions prior to 25.2 Description An uncontrolled search path exists in some Intel Driver and Support Assistant versions before 25.2 within Ring 3 User Applications, potentially allowing an escalation of...

PT-2025-46379

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An uncontrolled search path exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an escalation of privilege. A local,...

Intel OFU 代码问题漏洞

Intel OFU is a flash update application from Intel Corporation USA. A code issue vulnerability exists in Intel OFU versions prior to 14.1.31, which stems from an uncontrolled search path that could lead to elevation of privilege...

Intel Display Virtualization for Windows OS driver 代码问题漏洞

Intel Display Virtualization for Windows OS driver is a display virtualization driver from Intel Corporation USA. A code issue vulnerability exists in Intel Display Virtualization for Windows OS driver prior to version 1797, which stems from an uncontrolled search path in the device driver that...

PT-2025-46419

Name of the Vulnerable Software and Affected Versions System Event Log Viewer Utility software affected versions not specified Description An uncontrolled search path in some System Event Log Viewer Utility software within Ring 3: User Applications may allow an escalation of privilege. A local,...

Intel CIP 代码问题漏洞

Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause elevation of...

PT-2025-46388

Name of the Vulnerable Software and Affected Versions IntelR KillerTM Performance Suite versions prior to 4.0 40.25.509.1465 Description An uncontrolled search path exists in some IntelR KillerTM Performance Suite software. This issue, occurring within Ring 3 User Applications, may allow an...

Uncontrolled Search Path Element

Overview Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the /admin application path relative to /realms when accessed through a proxy that does not properly restrict or normalize URLs. An attacker can gain unauthorized access to sensitive administrative...

EUVD-2025-35003

A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...

CVE-2025-11940

A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...

CVE-2025-11940 LibreWolf Installer setup.nsi uncontrolled search path

A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...

CVE-2025-11940 LibreWolf Installer setup.nsi uncontrolled search path

A security vulnerability has been detected in LibreWolf up to 143.0.4-1 on Windows. This affects an unknown function of the file assets/setup.nsi of the component Installer. Such manipulation leads to uncontrolled search path. The attack must be carried out locally. Attacks of this nature are...

LibreWolf 代码问题漏洞

LibreWolf is a Firefox-based web browser open-sourced by LibreWolf. A code issue vulnerability exists in LibreWolf version 143.0.4-1 and earlier, which stems from an uncontrolled search path for an unknown function in the file assets/setup.nsi, which could lead to a local attack...

CVE-2025-26861

RemoteCall Remote Support Program for Operator versions prior to 5.3.0 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

CVE-2025-26859

RemoteView PC Application Console versions prior to 6.0.2 contain an uncontrolled search path element vulnerability. If a crafted DLL is placed in the same folder with the affected product, it may cause an arbitrary code execution...

Multiple RSUPPORT products may insecurely load Dynamic Link Libraries

Overview Multiple RSUPPORT products contain multiple vulnerabilities listed below. RemoteView PC Application Console vulnerable to uncontrolled search path element CWE-427 - CVE-2025-26859 RemoteCall Remote Support Program for Operator vulnerable to uncontrolled search path element CWE-427 -...