CVE-2024-10930

CVE-2024-10930 affects Carrier Block Load software (Carrier Inc.), versions 4.00–4.16. The issue is an Uncontrolled Search Path Element that could allow DLL hijacking and arbitrary code execution with elevated privileges. Exploitation is reportedly active per PT-2025-7322; multiple advisories (e....

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Acronis Cyber Protect 16’s data protection software lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of Acronis Cyber Protect 16 data protection software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-1804

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804 Blizzard Battle.Net profapi.dll uncontrolled search path

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804 Blizzard Battle.Net profapi.dll uncontrolled search path

A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity...

CVE-2025-1804

CVE-2025-1804 affects Blizzard Battle.Net (Windows) up to version 2.39.0.15212. The vulnerability resides in an unknown function of profapi.dll and causes an uncontrolled search path, enabling local exploitation. The initial descriptions indicate a locally approached attack with high complexity a...

Blizzard Battle.Net 代码问题漏洞

Blizzard Battle.Net is a multiplayer online gaming service provided by Blizzard Entertainment, Inc. for its games. A code issue vulnerability exists in Blizzard Battle.Net 2.39.0.15212 and prior versions, which stems from the presence of an uncontrolled search path that could lead to local code...

PT-2025-9186 · Blizzard · Blizzard Battle.Net

Name of the Vulnerable Software and Affected Versions: Blizzard Battle.Net versions up to 2.39.0.15212 Description: A critical issue was found in Blizzard Battle.Net, affecting some unknown functionality in the library profapi.dll. The manipulation leads to an uncontrolled search path. The attack...

The vulnerability of the Intel Ethernet Adapter Complete Driver Pack driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel Ethernet Adapter Complete Driver Pack driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Intel QuickAssist Technology (QAT) driver package lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Intel QuickAssist Technology QAT driver package is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39813

Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36291

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39372

Uncontrolled search path for the IntelR XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39284

CVE-2024-39284 concerns an uncontrolled search path in Intel® Advisor software before version 2024.2, potentially allowing an authenticated user to escalate privileges via local access. Connected sources (Intel advisory INTEL-SA-01208, Red Hat RH:CVE-2024-39284, and related feeds) confirm the aff...

CVE-2024-42492

The CVE-2024-42492 entry applies to the BIOS and System Firmware Update Package for IntelR Server M50FCP family prior to version R01.02.0002. The root cause is an uncontrolled search path element, which could allow a privileged user to escalate privileges via local access. Intel's advisory (INTEL...

Intel MPI Library 代码问题漏洞

Intel MPI Library is a library from Intel Corporation USA. A code issue vulnerability exists in Intel MPI Library versions prior to 2021.13 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentially enable elevation of privilege via local...