CWE-426

High likelihood

Untrusted Search Path

Parent: CWE-642 - External Control of Critical State Data

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

657 vulnerabilities with CWE-426
CVE-2018-18333 HIGH
Trend Micro Antivirus+ Security < 15.0.0.1163 - DLL Hijacking
CVSS 7.8
CVE-2018-15983 HIGH
Flash Player < 31.0.0.153 - Privilege Escalation via DLL Hijacking
CVSS 7.8
CVE-2018-16182 HIGH
MARKET SPEED < 16.4 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2018-16176 HIGH
JAEA Mapping Tool 2.0.1.6 and 2.0.1.7 - Untrusted Search Path
CVSS 7.8
CVE-2018-0667 HIGH
INplc SDK Express and Pro+ < 3.08 - Untrusted Search Path
CVSS 7.8
CVE-2018-1888 MEDIUM
IBM i Access < 7.1 - Untrusted Search Path via LoadLibrary DLL Hijacking
CVSS 5.3
CVE-2018-18629 HIGH
Keybase < 2.8.0-20181023124437 - Untrusted Search Path Privilege Escalation via keybase-redirector
CVSS 7.8
CVE-2018-7365 MEDIUM
ZTE uSmartView < 5.01.05 - Untrusted Search Path
CVSS 5.1
CVE-2018-12245 HIGH
Symantec Endpoint Protection <14.2 MP1 - DLL Preloading
CVSS 7.8
CVE-2018-19486 CRITICAL
Git < 2.19.2 - Untrusted Search Path via run_command() API
CVSS 9.8
CVE-2018-18519 HIGH
Best Free Keylogger < 5.2.9 - Privilege Escalation via Insecure File Permissions
CVSS 7.8
CVE-2018-0692 HIGH
Baidu Spark Browser < 43.23.1000.500 - Untrusted Search Path Vulnerability
CVSS 7.8
CVE-2018-1802 HIGH
IBM DB2 9.7, 10.1, 10.5, 11.1 - Untrusted Search Path
CVSS 8.4
CVE-2018-15974 HIGH
Adobe Framemaker < 14.0.361 - Untrusted Search Path
CVSS 7.8
CVE-2018-17980 HIGH
NoMachine < 5.3.27 and 6.x < 6.3.6 - Untrusted Search Path via Trojan Horse wintab32.dll
CVSS 7.8
CVE-2018-12449 HIGH
The Whale browser installer <0.4.3.0 - Code Injection
CVSS 7.8
CVE-2018-6700 HIGH
McAfee True Key < 5.1.165 - DLL Search Order Hijacking
CVSS 7.8
CVE-2018-0649 HIGH
ESET Internet Security - Untrusted Search Path
CVSS 7.8
CVE-2018-0648 HIGH
ChatWork Desktop App < 2.3.0 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2018-0624 HIGH
Yayoi 17 Series - Untrusted Search Path via ykkapi.dll Loading
CVSS 7.8
CVE-2018-0623 HIGH
Yayoi 17 Series - Untrusted Search Path via msjet49.dll Loading
CVSS 7.8
CVE-2018-10904 HIGH
glusterfs 3.12.0-3.12.13 - Remote Code Execution via Untrusted Search Path in io-stats Translator
CVSS 8.8
CVE-2018-0656 HIGH
Sony Digital Paper App < 1.4.0.16050 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2018-5003 HIGH
Adobe Creative Cloud < 4.5.5.342 - DLL Hijacking Privilege Escalation
CVSS 7.8
CVE-2018-0621 HIGH
LOGICOOL CONNECTION UTILITY SOFTWARE < 2.30.9 - Untrusted Search Path
CVSS 7.8
Details
Vulnerabilities 657
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits