CVE-2025-7427

Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio...

CVE-2025-7427 Uncontrolled Search Path Element in Arm Development Studio before 2025

Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio...

CVE-2025-7427 Uncontrolled Search Path Element in Arm Development Studio before 2025

Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio...

CVE-2025-7427

CVE-2025-7427 concerns an Uncontrolled Search Path Element in Arm Development Studio prior to 2025, enabling a DLL hijacking scenario that could lead to local arbitrary code execution in the user’s context. The root cause is a mismanaged search path element in Arm Development Studio, with failure...

PT-2025-30393 · Arm · Arm Development Studio

Name of the Vulnerable Software and Affected Versions: Arm Development Studio versions prior to 2025 Description: An uncontrolled search path element exists in Arm Development Studio that may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrar...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1729

A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges...

CVE-2025-1729

CVE-2025-1729 affects Lenovo TrackPoint Quick Menu (TPQMAssistant.exe). A DLL hijacking flaw allows a local attacker to escalate privileges by placing a malicious hostfxr.dll in the TPQM directory where the binary is launched; the TPQM folder is writable by standard users, enabling this. The issu...

CVE-2025-1700

CVE-2025-1700 describes a DLL hijacking weakness in the Motorola Software Fix (Rescue and Smart Assistant) installer that could allow a local attacker to escalate privileges during software installation. The affected component is the installer for Motorola Software Fix, and the root cause is DLL ...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

CVE-2025-1700

A DLL hijacking vulnerability was reported in the Motorola Software Fix Rescue and Smart Assistant installer that could allow a local attacker to escalate privileges during installation of the software...

PT-2025-29956 · Motorola · Motorola Software Fix

Name of the Vulnerable Software and Affected Versions: Motorola Software Fix Rescue and Smart Assistant affected versions not specified Description: A DLL hijacking issue exists in the Motorola Software Fix Rescue and Smart Assistant installer. This could allow a local attacker to escalate...

Lenovo TrackPoint Quick Menu 安全漏洞

Lenovo TrackPoint Quick Menu is a shortcut menu program from the Chinese company Lenovo. A security vulnerability exists in Lenovo TrackPoint Quick Menu, which stems from the presence of a DLL hijacking vulnerability that could lead to elevation of privilege by a local attacker...

CVE-2024-24916 DLL-HiJacking

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges admin...

RansomLord NG Anti-Ransomware Exploit Tool 1.0

RansomLord is a proof-of-concept tool that automates the creation of PE files, used to compromise ransomware pre-encryption. This tool uses dll hijacking to defeat ransomware by placing PE files in the x32 or x64 directories where the program is run from. This is the NG version that currently...

Exploit for Uncontrolled Search Path Element in Notepad-Plus-Plus Notepad\+\+

⚠️ IMPORTANT NOTICE: For security research and educational p...

CVE-2025-49148 ClipShare Server Allows Local Privilege Escalation via DLL Hijacking

ClipShare is a lightweight and cross-platform tool for clipboard sharing. Prior to 3.8.5, ClipShare Server for Windows uses the default Windows DLL search order and loads system libraries like CRYPTBASE.dll and WindowsCodecs.dll from its own directory before the system path. A local, non-privileg...

CVE-2025-49148

CVE-2025-49148 affects ClipShare Server for Windows prior to 3.8.5. The root cause is the use of the default Windows DLL search order, causing the server to load system libraries (e.g., CRYPTBASE.dll, WindowsCodecs.dll) from its own directory. A local, non-privileged user who can write to the fol...