The vulnerability of the Intel Raid Web Console web console involves an uncontrolled search path element, which allows attackers to escalate their privileges.

The vulnerability of the Intel Raid Web Console web console relates to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the python3.dll library, which is an interpreter for the Python programming language, allows attackers to compromise the integrity and accessibility of protected information.

The vulnerability of the python3.dll library, which is responsible for interpreting Python programming language code, is related to the use of an invalid search path during the loading of the vulnerable file after the PySetPath function is called. Exploiting this vulnerability could allow a...

CVE-2024-7995

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...

CVE-2024-7995 Autodesk VRED Design Privilege Escalation Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...

CVE-2024-7995 Autodesk VRED Design Privilege Escalation Vulnerability

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution...

CVE-2024-7995

Autodesk VRED Design is affected by CVE-2024-7995, where a maliciously crafted binary file downloaded could exploit an untrusted search path to escalate privileges to NT AUTHORITY/SYSTEM, potentially enabling code execution. The condition is triggered by handling a downloaded binary within the VR...

PT-2024-38744 · Autodesk · Vred Design

Name of the Vulnerable Software and Affected Versions: VRED Design affected versions not specified Description: A maliciously crafted binary file, when downloaded, could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design...

Autodesk VRED Design 安全漏洞

Autodesk VRED Design is a professional 3D visualization software from Autodesk, Inc. A security vulnerability exists in Autodesk VRED Design version 2025, which stems from the use of an untrusted search path, where a maliciously crafted binary file may lead to privilege escalation during download...

Exploit for Untrusted Search Path in Yandex Yandex_Browser

CVE-2024-6473 PoC Yandex Browser for Desktop before 24.7...

SUSE CVE-2024-8996

Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...

SUSE CVE-2024-8975

Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the use of an insecure search path, allowing a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Adobe Framemaker desktop publishing system, related to the use of an unreliable search path, allows a hacker to execute arbitrary code in the context of the current user.

The vulnerability of the desktop publishing system Adobe Framemaker is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the current user...

Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...

Adobe Dimension < 3.4.3 Arbitrary code execution (APSB21-40) (macOS)

The version of Adobe Dimension installed on the remote macOS host is prior to 3.4.3. It is, therefore, affected by a vulnerability as referenced in the APSB21-40 advisory. - Adobe Dimension version 3.4 and earlier is affected by an Uncontrolled Search Path Element element. An unauthenticated...

The vulnerability of Intel Quartus Prime Pro’s automated design system lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro automated design systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack on Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the driver installer for Intel Ethernet Adapter Complete Driver Pack on Windows operating systems is related to an uncontrolled search path element. Exploiting this vulnerability can allow attackers to gain increased privileges...

Adobe Creative Cloud < 4.0.0.185 Multiple Vulnerabilities (APSB17-13)

The version of Adobe Creative Cloud installed on the remote Windows host is prior to 4.0.0.185. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-13 advisory. - Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource...

Adobe InCopy 15.0.0 < 15.1.4 Arbitrary code execution (APSB21-05)

The version of Adobe InCopy installed on the remote host is prior to 15.1.4. It is, therefore, affected by a vulnerability as referenced in the APSB21-05 advisory. - InCopy version 15.1.1 and earlier for Windows is affected by an uncontrolled search path vulnerability that could result in arbitra...

Adobe Dreamweaver 20.2.0 < 20.2.1 / 21.0 < 21.1 Information disclosure (APSB21-13) (macOS)

The version of Adobe Dreamweaver installed on the remote macOS host is prior to 20.2.1, 21.1. It is, therefore, affected by a vulnerability as referenced in the APSB21-13 advisory. - Adobe Dreamweaver versions 21.0 and earlier and 20.2 and earlier is affected by an untrusted search path...