CVE-2020-24420

Adobe Photoshop for Windows version 21.2.1 and earlier is affected by an uncontrolled search path element vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...

Adobe Fixes 16 Critical Code-Execution Bugs Across Portfolio

Adobe has released 18 out-of-band security patches in 10 different software packages, including fixes for critical vulnerabilities that stretch across its product suite. Adobe Illustrator was hit the hardest. There are 16 critical bugs, all of which allow arbitrary code execution in the context o...

PT-2020-4586

Name of the Vulnerable Software and Affected Versions Adobe Media Encoder versions 14.4 and earlier Description The issue is related to an uncontrolled search path element in the application, which could allow a remote attacker to execute arbitrary code in the context of the current user by using...

PT-2020-4589

Name of the Vulnerable Software and Affected Versions Adobe Premiere Pro versions 14.4 and earlier Description The issue is related to an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2020-4588

Name of the Vulnerable Software and Affected Versions Adobe Photoshop for Windows version 21.2.1 and earlier Description The issue is related to an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation requires user...

PT-2020-4587

Name of the Vulnerable Software and Affected Versions Adobe Creative Cloud Desktop Application versions 5.2 and earlier Adobe Creative Cloud Desktop Application versions 2.1 and earlier Description The issue is related to an uncontrolled search path vulnerability that could result in arbitrary co...

PT-2020-4590

Name of the Vulnerable Software and Affected Versions Adobe After Effects version 17.1.1 and earlier Description The issue is related to an uncontrolled search path, which could result in arbitrary code execution in the context of the current user. Exploitation requires user interaction, where a...

PT-2020-4601

Name of the Vulnerable Software and Affected Versions Adobe Dreamweaver version 20.2 and earlier Description The issue is related to an uncontrolled search path element that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the...

CVE-2020-8345: Uncontrolled Search Path Element

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege...

CVE-2020-26894: Uncontrolled Search Path Element

LiveCode v9.6.1 on Windows allows local, low-privileged users to gain privileges by creating a malicious "cmd.exe" in the folder of the vulnerable LiveCode application. If the application is using LiveCode's "shell" function, it will attempt to search for "cmd.exe" in the folder of the current...

CVE-2020-26538: Uncontrolled Search Path Element

An issue was discovered in Foxit Reader and PhantomPDF before 10.1. It allows attackers to execute arbitrary code via a Trojan horse taskkill.exe in the current working directory...

qt: files placed by attacker can influence the working directory and lead to malicious code execution

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

CVE-2020-3979: Uncontrolled Search Path Element

InstallBuilder for Qt Windows versions prior to 20.7.0 installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which coul...

CVE-2020-7358: Uncontrolled Search Path Element

In AppSpider installer versions prior to 7.2.126, the AppSpider installer calls an executable which can be placed in the appropriate directory by an attacker with access to the local machine. This would prevent the installer from distinguishing between a valid executable called during an...

CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

DEBIAN-CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

AZL-6834 CVE-2020-0570 affecting package qt5-qtsvg for versions less than 5.12.11-3

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

Privilege escalation

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

CVE-2020-0570

CVE-2020-0570 affects the Qt library: Uncontrolled search path in the Qt Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to elevate privileges via local access. The issue arises from improper handling of library search paths, enabling loading of unintended system librarie...