CWE-426

High likelihood

Untrusted Search Path

Parent: CWE-642 - External Control of Critical State Data

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

639 vulnerabilities with CWE-426
CVE-2018-18367 HIGH
Symantec Endpoint Protection Manager <= 12.1 RU6 MP9 and < 14.2 RU1 - DLL Preloading
CVSS 7.8
CVE-2018-18369 HIGH
Norton Security < 22.16.3 and Symantec Endpoint Protection Cloud < 22.16.3 - DLL Preloading
CVSS 7.8
CVE-2018-10959 HIGH
Avecto Defendpoint 4.0-4.4.267.0 - Untrusted Search Path via Environment Variable Manipulation
CVSS 7.5
CVE-2018-18913 HIGH
Opera < 57.0.3098.106 - DLL Search Order Hijacking via Malicious ZIP Archive
CVSS 7.8
CVE-2018-16190 HIGH
LHMelting < 1.65.3.6 and UNARJ32.DLL < 1.10.1.25 - Untrusted Search Path
CVSS 7.8
CVE-2018-16189 HIGH
unlha32.dll < 3.00 - Untrusted Search Path
CVSS 7.8
CVE-2018-18364 HIGH
Symantec Ghost Solution Suite < 3.3 RU1 - DLL Hijacking via Untrusted Search Path
CVSS 7.3
CVE-2018-18333 HIGH
Trend Micro Antivirus+ Security < 15.0.0.1163 - DLL Hijacking
CVSS 7.8
CVE-2018-15983 HIGH
Flash Player < 31.0.0.153 - Privilege Escalation via DLL Hijacking
CVSS 7.8
CVE-2018-16182 HIGH
MARKET SPEED < 16.4 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2018-16176 HIGH
JAEA Mapping Tool 2.0.1.6 and 2.0.1.7 - Untrusted Search Path
CVSS 7.8
CVE-2018-0667 HIGH
INplc SDK Express and Pro+ < 3.08 - Untrusted Search Path
CVSS 7.8
CVE-2018-1888 MEDIUM
IBM i Access < 7.1 - Untrusted Search Path via LoadLibrary DLL Hijacking
CVSS 5.3
CVE-2018-18629 HIGH
Keybase < 2.8.0-20181023124437 - Untrusted Search Path Privilege Escalation via keybase-redirector
CVSS 7.8
CVE-2018-7365 MEDIUM
ZTE uSmartView < 5.01.05 - Untrusted Search Path
CVSS 5.1
CVE-2018-12245 HIGH
Symantec Endpoint Protection <14.2 MP1 - DLL Preloading
CVSS 7.8
CVE-2018-19486 CRITICAL
Git < 2.19.2 - Untrusted Search Path via run_command() API
CVSS 9.8
CVE-2018-18519 HIGH
Best Free Keylogger < 5.2.9 - Privilege Escalation via Insecure File Permissions
CVSS 7.8
CVE-2018-0692 HIGH
Baidu Spark Browser < 43.23.1000.500 - Untrusted Search Path Vulnerability
CVSS 7.8
CVE-2018-1802 HIGH
IBM DB2 9.7, 10.1, 10.5, 11.1 - Untrusted Search Path
CVSS 8.4
CVE-2018-15974 HIGH
Adobe Framemaker < 14.0.361 - Untrusted Search Path
CVSS 7.8
CVE-2018-17980 HIGH
NoMachine < 5.3.27 and 6.x < 6.3.6 - Untrusted Search Path via Trojan Horse wintab32.dll
CVSS 7.8
CVE-2018-12449 HIGH
The Whale browser installer <0.4.3.0 - Code Injection
CVSS 7.8
CVE-2018-6700 HIGH
McAfee True Key < 5.1.165 - DLL Search Order Hijacking
CVSS 7.8
CVE-2018-0649 HIGH
ESET Internet Security - Untrusted Search Path
CVSS 7.8
Details
Vulnerabilities 639
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits