libextractor-privesc

CVE-2026-100310: Escalada de privilegios en GNU libextractor a través de LIBEXTRACTORPREFIX Resumen El mecanismo de carga de plugins de GNU libextractor utiliza la variable de entorno LIBEXTRACTORPREFIX para determinar desde dónde cargar las bibliotecas compartidas plugins .so. Debido a que utili...

CVE-2026-75768 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a vict...

Duplicate Advisory: Uncontrolled search path when invoking the Graphviz 'dot' binary (CWE-426/CWE-427)

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6hwm-xvph-95vm. This link is maintained to preserve external references. Original Description NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in...

CVE-2026-55013

An uncontrolled search path element in Windows Remote Help Defense allows an authorized local attacker (low privileges, no user interaction) to spoof, with HIGH confidentiality and integrity impact per CVSS 3.1 (base score 7.1). Microsoft's update guide is the primary reference. No exploit code o...

CVE-2026-32791

A flaw was found in Intel Performance Counter Monitor Intel PCM. An unprivileged, authenticated local attacker could exploit an untrusted search path vulnerability. This could lead to an escalation of privilege, allowing the attacker to gain higher access rights. The vulnerability has a high impa...

PT-2026-79189

Name of the Vulnerable Software and Affected Versions Windows Remote Help Defense affected versions not specified Description An uncontrolled search path element allows an authorized attacker to perform local spoofing. This occurs when the application searches for a file in a directory that can b...

EUVD-2026-56530

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

CVE-2026-28700

EquiTriton Ring 3 User Applications (pre-f5ddbb5) are affected by an Uncontrolled search path vulnerability that may allow local privilege escalation. Impact on confidentiality, integrity, and availability is rated High. Root cause: search path handling. No explicit remediation is provided in the...

EUVD-2020-28601

Malware in sbrugna...

EUVD-2020-28615

Malware in sbrugna...

CVE-2024-49515 Substance3D - Painter | Untrusted Search Path (CWE-426)

Substance3D - Painter versions 10.1.0 and earlier are affected by an Untrusted Search Path vulnerability that might allow attackers to execute arbitrary code. If the application uses a search path to locate critical resources such as programs, then an attacker could modify that search path to poi...

CVE-2024-47422

Adobe FrameMaker (versions 2020.6, 2022.4 and earlier) is affected by CVE-2024-47422, an Untrusted Search Path vulnerability that could allow arbitrary code execution when a malicious path is found in search directories. The issue is a local vulnerability with user interaction required, and the r...

GHSA-R4PF-3V7R-HH55 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

Impact Windows-Only: The NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh installer script. NSExec by default searches the current directory of where the installer is located before searching PATH. This means that if an attacker can place a malicious executable file named...

Microsoft Windows Unsafe Handling Practices

Hi @ll, This multi-part post can be read even without a MIME-compliant program! Back in 2014, I reported a vulnerability in CreateProcess's handling of .cmd and .bat files that Microsoft fixed with MS14-019 alias MSKB 2922229 and assigned CVE-2014-0315: command lines with a batch script as first...

CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

Design/Logic Flaw

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

CVE-2020-7490

Summary (CVE-2020-7490): The vulnerability is a CWE-426 Untrusted Search Path issue in Schneider Electric’s Vijeo Designer software. Affected products/versions include Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior). The underlying issue is that loading a m...

CVE-2020-7490

A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic V1.1 HotFix 15 and prior and Vijeo Designer V6.9 SP9 and prior, which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product...

Design/Logic Flaw

A CWE-426: Untrusted Search Path vulnerability exists in ZigBee Installation Kit Versions prior to 1.0.1, which could cause execution of malicious code when a malicious file is put in the search path...

CVE-2020-7476

The CVE-2020-7476 entry affects Schneider Electric ZigBee Installation Kit prior to version 1.0.1, with a CWE-426 Untrusted Search Path issue that could lead to execution of malicious code if a attacker-provided file is placed in the search path. Root cause: untrusted search path. Impact is shell...