293 matches found
Yandex Messenger security vulnerability
Yandex Messenger is an instant messaging application from the Russian company Yandex. A security vulnerability exists in Yandex Messenger versions prior to 2.245, which stems from improper control of the search path element and may lead to search order hijacking...
Wazuh Agent SCA Data Compromise
The vulnerability of the SCA module of the Wazuh Agent component, a security monitoring and threat detection platform, is related to improper external control of the file name or path. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of protected...
CVE-2025-64738
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...
EUVD-2025-175326
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...
CVE-2025-64738
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...
CVE-2025-64738
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...
CVE-2025-64739
The CVE-2025-64739 issue affects Zoom Workplace and Zoom Clients. The vulnerability is described as external control of a file name or path, enabling an unauthenticated user to disclose information over the network. Public advisories (NCSC, Red Hat, CVE listings) confirm the flaw and indicate mit...
CVE-2025-64738 Zoom Workplace for macOS - External Control of File Name or Path
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...
PT-2025-46831
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduct a disclosure of information via local access...
CVE-2025-59511
External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally...
EUVD-2025-93446
External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally...
CVE-2025-20614
CVE-2025-20614 concerns Intel’s CIP software prior to WIN_DCA_2.4.0.11001, where external control of a file name or path in Ring 3 user applications may enable privilege escalation. The description across connected sources states an unprivileged software adversary with a privileged user and a low...
Zoom Workplace < 6.5.10 Vulnerability (ZSB-25041)
The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25041 advisory. - External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of...
PT-2025-46381
Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw related to external control of file name or path within Ring 3 User Applications, potentially allowing an escalation of privilege. A local...
Intel CIP security vulnerabilities
Intel CIP is an optional program from Intel designed to improve products by collecting performance data from users' computers. Intel CIP suffers from an elevation of privilege vulnerability that stems from improper external control of filenames or paths, and no details of the vulnerability are...
TencentOS Server 3: .NET 8.0 (TSSA-2025:0820)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0820 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
EUVD-2025-34361
External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally...
EUVD-2025-34398
External control of file name or path in Windows Core Shell allows an unauthorized attacker to perform spoofing over a network...
