Privilege escalation

Uncontrolled search path element in the installer for IntelR Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0515

Uncontrolled search path element in the installer for IntelR Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0565: Uncontrolled Search Path Element

Uncontrolled search path in IntelR Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0515: Uncontrolled Search Path Element

Uncontrolled search path element in the installer for IntelR Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel(R) Graphics Driver Uncontrolled Search Path Vulnerability

IntelR Graphics Driver is a graphics card driver from Intel. A security vulnerability exists in IntelR Graphics Driver. An attacker can exploit the vulnerability to elevate privileges...

Intel(R) Graphics Driver Uncontrolled Search Path Vulnerability (CNVD-2020-18646)

IntelR Graphics Driver is a graphics card driver from Intel. A security vulnerability exists in IntelR Graphics Driver. An attacker can exploit the vulnerability to elevate privileges...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in Intel® Graphics Drivers may allow escalation of privilege, denial of service and/or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-0502 Description:...

PT-2020-1971

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.7584 Intel Graphics Drivers versions prior to 15.45.30.5103 Intel Graphics Drivers versions prior to 15.40.44.5107 Intel Graphics Drivers versions prior to 15.36.38.5117 Intel Graphics Drivers...

PT-2020-1876

Name of the Vulnerable Software and Affected Versions Intel Graphics Drivers versions prior to 26.20.100.7158 Description The issue is related to an uncontrolled search path in Intel Graphics Drivers, which may allow an authenticated user to potentially enable escalation of privilege via local...

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

The Cisco AnyConnect Secure Mobility Client is a virtual private network VPN client for a variety of operating systems and hardware configurations. An uncontrolled search path vulnerability exists in the installer component of the Cisco AnyConnect Secure Mobility Client for Windows versions prior...

CVE-2020-8601: Uncontrolled Search Path Element

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153: Uncontrolled Search Path Element

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

Dell Patches SupportAssist Flaw That Allows Arbitrary Code Execution

Dell has patched a high-severity flaw in its SupportAssist software that could allow an attacker to execute arbitrary code with administrator privileges on affected computers. The flaw, an uncontrolled search path vulnerability that is being tracked as CVE-2020-5316, could allow a locally...

PT-2020-6377

Name of the Vulnerable Software and Affected Versions ProSoft Configurator versions 1.002 and prior Description A vulnerability exists in ProSoft Configurator, related to an uncontrolled search path element, which could cause the execution of untrusted code when using double click to open a proje...

PT-2020-22823

exploit CVE-2020-005: Dell SupportAssist Client for business PCs ver.2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3; for home PCs version 2.0, 2.0.1, 2.0.2, 2.1, 2.1.1, 2.1.2, 2.1.3, 2.2, 2.2.1, 2.2.2, 2.2.3, 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 3.2.1, 3.2.2, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4 - Uncontrolled...

PT-2020-11415

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist Client versions 2.0 through 3.4 Description: The issue is related to an Uncontrolled Search Path Vulnerability. Recommendations: For versions 2.0 through 3.4, update to a version that is not affected by this issue...

The vulnerability of the Intel SNMP Subagent Stand-Alone software lies in its uncontrolled search path in the installer, which allows a malicious actor to increase their privileges.

The vulnerability of the Intel SNMP Subagent Stand-Alone software is related to an uncontrolled element in the search process within the installer. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-0570

Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local access...

CVE-2019-20406: Uncontrolled Search Path Element

The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code &...