The vulnerability of the "Yandex.Telemost" video conference software for macOS allows a hacker to elevate their privileges and gain access to the device’s hardware resources.

The vulnerability of the "Yandex.Telemost" video conference software lies in the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges and gain access to the device’s hardware resources...

The vulnerability of Yandex.Disk’s cloud storage service for the iOS operating system, related to the use of an unreliable search path, allows a hacker to interrupt the search order in order to replace the executable file.

The vulnerability of Yandex.Disk’s cloud storage service for the iOS operating system is related to the use of an unreliable search path. Exploiting this vulnerability could allow a attacker to intercept the search order in order to replace the executable file with a malicious one...

The vulnerability of the Alpha diagnostic automation tool lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of the Alpha.diagnostics automation diagnostic tool is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Yandex.Messenger for macOS, related to the use of an insecure search path, allows a hacker to elevate their privileges and gain access to the device’s hardware resources.

The vulnerability of the Yandex.Messenger for macOS relates to the use of an insecure search path. Exploiting this vulnerability can allow a hacker to gain increased privileges and access to the device’s hardware resources...

Arm Development Studio 代码问题漏洞

Arm Development Studio is a software development tool designed for the Arm architecture from Arm UK. A code issue vulnerability exists in versions prior to Arm Development Studio 2025 that stems from an uncontrolled search path element that could lead to a DLL hijacking attack...

GHSA-VMG3-7V43-9G23 NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path

NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering,...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path though incorrect handling of the OCI hook createContainer during container initialization when enable-cuda-compat is used. An attacker with low privileges in a container can run arbitrary code with higher privilege...

Untrusted Search Path

Overview Affected versions of this package are vulnerable to Untrusted Search Path though incorrect handling of the OCI hook createContainer during container initialization when enable-cuda-compat is used. An attacker with low privileges in a container can run arbitrary code with higher privilege...

CVE-2025-48496

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors...

Emerson ValveLink 代码问题漏洞

Emerson ValveLink is a suite of digital valve configuration and diagnostic software from Emerson Electric USA. A code issue vulnerability exists in Emerson ValveLink that stems from an improperly controlled resource search path that could lead to unintended behavior...

CVE-2025-48496 Emerson ValveLink Products Uncontrolled Search Path Element

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors...

CVE-2025-48496

CVE-2025-48496 affects Emerson ValveLink products and describes an improper handling of resource search paths: fixed or controlled search paths may include locations under attacker control. Public documents confirm ValveLink as the affected software and cite the underlying issue as an uncontrolle...

CVE-2025-48496 Emerson ValveLink Products Uncontrolled Search Path Element

Emerson ValveLink products use a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors...

CVE-2025-46334

Git GUI allows you to use the Git source control management tools via a GUI. A malicious repository can ship versions of sh.exe or typical textconv filter programs such as astextplain. Due to the unfortunate design of Tcl on Windows, the search path when looking for an executable always includes...

PT-2025-29181 · Emerson · Valvelink

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink products affected versions not specified Description: Emerson ValveLink products utilize a fixed or controlled search path for resource location. However, one or more locations within this path may be controllable by...

The vulnerability of the Apache Tomcat software lies in the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of the Apache Tomcat software is related to the use of an insecure path search mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Advanced Installer 安全漏洞

Advanced Installer is a packaged software from Advanced Installer open source. A security vulnerability exists in versions of Advanced Installer prior to 22.6, which stems from improper control of the search path element and may result in local elevation of privilege...

GLSA-202506-05 : GTK+ 3: Search path vulnerability

The remote host is affected by the vulnerability described in GLSA-202506-05 GTK+ 3: Search path vulnerability A vulnerability has been discovered in GTK+ 3. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the...

CVE-2025-49144 Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path

Notepad++ is a free and open-source source code editor. In versions 8.8.1 and prior, a privilege escalation vulnerability exists in the Notepad++ v8.8.1 installer that allows unprivileged users to gain SYSTEM-level privileges through insecure executable search paths. An attacker could use social...