6914 matches found
CVE-2025-49571
Adobe Substance3D Modeler
CVE-2025-49571 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)
Substance3D - Modeler versions 1.22.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application uses an uncontrolled search path to locate critical resources such as programs, ...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to uncontrolled recursion in the CBOR data processing. An attacker can gain elevated privileges by providing specially crafted input that triggers excessive recursive calls. Remediation A fix was pushed into t...
Uncontrolled Recursion
Overview Affected versions of this package are vulnerable to Uncontrolled Recursion via uncontrolled recursion in the process. An attacker can cause a system crash or resource exhaustion by providing specially crafted input during local authenticated access. Remediation A fix was pushed into the...
CVE-2025-27717
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26404
Uncontrolled search path for some IntelR DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-21093
Uncontrolled search path element for some IntelR Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-22838
Uncontrolled search path for some IntelR RealSenseTM Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20627
Uncontrolled search path for some IntelR oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20092
Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20048
Uncontrolled search path for the IntelR Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20017
Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-53722
CVE-2025-53722 affects Windows Remote Desktop Services. Described as Denial-of-Service via uncontrolled resource consumption, exploitable over the network with no user interaction and no privileges required. CVSS v3.1 base score 7.5 (Network, Low attack complexity, No privileges, No user interact...
CVE-2025-27717
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-27717
Uncontrolled search path for some IntelR Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-27717
CVE-2025-27717: An uncontrolled search path in some Intel® Graphics Driver software may allow an authenticated user to escalate privileges via local access. The issue is detailed across multiple sources, including Intel’s advisory Intel-SA-01299, which lists affected Intel Graphics Driver compone...
CVE-2025-26697
Uncontrolled resource consumption in the Linux kernel-mode driver for some IntelR 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable denial of service...
CVE-2025-26472
Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for IntelR TiberTM Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access...
CVE-2025-26404
CVE-2025-26404 concerns Intel® DSA (Driver & Support Assistant) software prior to version 25.2.15.9. The issue is an uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Impact is described as privilege escalation with high secrecy/impact on confi...