CVE-2025-20043

Claimed vulnerability: CVE-2025-20043 concerns an uncontrolled search path in Intel RealSense SDK software prior to version 2.56.2. The underlying issue may enable escalation of privilege via local access for an authenticated user. Affected software/versions: Intel RealSense SDKs before 2.56.2. I...

CVE-2025-43553 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...

CVE-2025-43553 Substance3D - Modeler | Uncontrolled Search Path Element (CWE-427)

Substance3D - Modeler versions 1.21.0 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application relies on a search path to locate critical resources such as libraries or...

CVE-2025-43553

Adobe Substance 3D Modeler v1.21.0 and earlier is affected by an Uncontrolled Search Path Element (CWE-427) that could lead to arbitrary code execution in the user’s context. Exploitation requires user interaction (opening a malicious file). Remediation: update to v1.22.0 or later per APSB25-51; ...

CVE-2025-4539

A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

CVE-2025-4532

A vulnerability classified as critical has been found in Shanghai Bairui Information Technology SunloginClient 15.8.3.19819. This affects an unknown part in the library process.dll of the file sunloginguard.exe. The manipulation leads to uncontrolled search path. Local access is required to...

PT-2025-20961 · Microsoft · Windows Deployment Services +1

Name of the Vulnerable Software and Affected Versions: Windows Deployment Services affected versions not specified Description: The issue is related to uncontrolled resource consumption in Windows Deployment Services, allowing an unauthorized attacker to deny service locally. This is a...

Intel QAT 代码问题漏洞

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. A code issue vulnerability exists in Intel QAT software that stems from an uncontrolled search path that can be exploited by an attacker to cause a local elevation of privilege...

Intel Graphics Drivers 代码问题漏洞

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics Drivers that stems from an uncontrolled search path that could lead to local elevation of privilege...

PT-2025-21044 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.21.0 and earlier Description: The issue is related to an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. If the application reli...

Intel oneAPI Level Zero 代码问题漏洞

Intel oneAPI Level Zero is an underlying heterogeneous computing interface standard from Intel Corporation USA that provides direct hardware access to Intel GPUs/FPGAs. A code issue vulnerability exists in Intel oneAPI Level Zero that stems from an uncontrolled search path that could lead to loca...

Adobe Substance3D 代码问题漏洞

Adobe Substance 3D Modeler is a 3D modeling and sculpting software from the American company Audobee Adobe. Adobe Substance 3D Modeler suffers from an uncontrolled search path element vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current user...

Intel oneAPI DPC++/C++ Compiler 代码问题漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2025.0.0, which stems from an uncontrolled search path that could lead to local elevation of privilege...

PT-2025-21114 · Intel · Openvino Model Server

Name of the Vulnerable Software and Affected Versions: OpenVINO model server software versions prior to 2024.4 Description: The issue allows an unauthenticated user to potentially enable denial of service via adjacent access due to uncontrolled resource consumption. Recommendations: For versions...

Intel Arc & Iris Xe Graphics 代码问题漏洞

Intel Arc & Iris Xe Graphics is a family of graphics cards from the U.S.-based Intel Corporation Intel. A code issue vulnerability exists in Intel Arc & Iris Xe Graphics versions prior to 32.0.101.6083 and 32.0.101.5736, which stems from an uncontrolled search path that could lead to local...

CVE-2025-4525

A vulnerability, which was classified as critical, has been found in Discord 1.0.9188 on Windows. Affected by this issue is some unknown functionality in the library WINSTA.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an...

CVE-2025-47270 nimiq-network-libp2p Uncontrolled Resource Consumption vulnerability

nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. The nimiq-network-libp2p subcrate of nimiq/core-rs-albatross is vulnerable to a Denial of Service DoS attack due to uncontrolled memory allocation. Specifically, the...

core-rs-albatross 资源管理错误漏洞

core-rs-albatross is an open source Rust implementation of the Albatross protocol by Nimiq. A resource management error vulnerability exists in core-rs-albatross versions prior to v1.1.0, which stems from uncontrolled memory allocation and could lead to a denial of service attack...

CVE-2025-4539

A vulnerability was found in Hainan ToDesk 4.7.6.3. It has been declared as critical. This vulnerability affects unknown code in the library profapi.dll of the component DLL File Parser. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The...