CWE-426

High likelihood

Untrusted Search Path

Parent: CWE-642 - External Control of Critical State Data

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

657 vulnerabilities with CWE-426
CVE-2017-3007 HIGH
Adobe Creative Cloud - Untrusted Search Path
CVSS 7.8
CVE-2017-6189 HIGH
Amazon Kindle for PC < 1.17.44183 - Untrusted Search Path DLL Hijacking
CVSS 7.3
CVE-2017-2983 HIGH
Adobe Shockwave <= 12.2.7.197 - DLL Hijacking
CVSS 7.8
CVE-2017-6798 HIGH
Trend Micro Endpoint Sensor <1.6 - RCE
CVSS 7.8
CVE-2017-5235 HIGH
Rapid7 Metasploit Pro <4.13.0-2017022101 - DLL Preloading
CVSS 7.8
CVE-2017-5234 HIGH
Rapid7 Insight Collector <1.0.16 - Code Injection
CVSS 7.8
CVE-2017-5233 HIGH
Rapid7 AppSpider Pro <6.14.053 - Code Injection
CVSS 7.8
CVE-2017-5232 HIGH
Rapid7 Nexpose <6.4.24 - DLL Preloading
CVSS 7.8
CVE-2016-6593 HIGH
Symantec VIP Access Desktop <2.2.2 - RCE
CVSS 7.8
CVE-2016-10837 HIGH
cPanel 11.48.0.5-11.48.5.2 - Remote Code Execution via Unsafe @INC Path
CVSS 7.5
CVE-2016-6803 HIGH
Apache OpenOffice < 4.1.3 - Untrusted Search Path
CVSS 7.8
CVE-2016-8746 MEDIUM
Apache Ranger <0.6.3 - Info Disclosure
CVSS 5.9
CVE-2016-7838 HIGH
WinSparkle < 0.5.3 - Untrusted Search Path
CVSS 7.8
CVE-2016-4902 HIGH
The Public Certification Service for Individuals < 2.6 and < 3.0.1 - Untrusted Search Path
CVSS 7.8
CVE-2016-7804 HIGH
7-Zip < 16.02 - Untrusted Search Path
CVSS 7.8
CVE-2016-4901 HIGH
National Tax Agency e-Tax Software - Untrusted Search Path
CVSS 7.8
CVE-2016-4900 HIGH
Evernote for Windows < 6.3 - Untrusted Search Path
CVSS 7.8
CVE-2016-4846 HIGH
PhishWall Client Internet Explorer < 3.7.8.1 - Untrusted Search Path
CVSS 7.8
CVE-2016-6167 HIGH
Putty beta 0.67 - Untrusted Search Path via Trojan Horse DLL
CVSS 7.8
CVE-2016-1417 HIGH
Snort 2.9.7.0-WIN32 - Remote Code Execution via DLL Hijacking
CVSS 8.8
CVE-2016-1281 HIGH
TrueCrypt 7.1a-7.2 and VeraCrypt < 1.16 - Untrusted Search Path DLL Hijacking
CVSS 7.8
CVE-2016-10009 HIGH
OpenSSH < 7.3 - Remote Code Execution via Forwarded SSH-Agent PKCS#11 Module Loading
CVSS 7.3
CVE-2016-7085 HIGH
VMware Workstation Pro and Player 12.x - Untrusted Search Path
CVSS 7.8
CVE-2016-7300 HIGH
Microsoft Auto Updater for Mac - Untrusted Search Path Privilege Escalation
CVSS 7.8
CVE-2016-9274 HIGH
Git for Windows 1.0.0-1.9.3 - Untrusted Search Path via Trojan Horse git.exe
CVSS 7.8
Details
Vulnerabilities 657
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits