CWE-427

Uncontrolled Search Path Element

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

1,171 vulnerabilities with CWE-427
CVE-2024-48605 HIGH
Helakuru 1.1 - Uncontrolled Search Path Element via wow64log.dll
CVSS 7.8
CVE-2024-10093 HIGH
VSO ConvertXtoDvd 7.0.0.83 - Uncontrolled Search Path
CVSS 7.8
CVE-2024-10068 HIGH
OpenSight Software FlashFXP 5.4.0.3970 - Uncontrolled Search Path
CVSS 7.8
CVE-2024-49391 HIGH
Acronis Cyber Files <9.0.0x24 - Privilege Escalation
CVSS 7.3
CVE-2024-49390 HIGH
Acronis Cyber Files <9.0.0x24 - Privilege Escalation
CVSS 7.3
CVE-2024-45710 HIGH
SolarWinds Platform < 2024.4 - Local Privilege Escalation via Uncontrolled Search Path Element
CVSS 7.8
CVE-2024-30117 LOW
HCL BigFix Platform 9.5-9.5.25 - Uncontrolled Search Path Element
CVSS 2.5
CVE-2024-9046 HIGH
Lenovo stARstudio < 2020.3.12.34806 - DLL Hijacking
CVSS 7.8
CVE-2024-4132 HIGH
Lenovo Lock Screen < 9.0.18 - DLL Hijacking
CVSS 7.8
CVE-2024-4131 HIGH
Lenovo Emulator < 9.1.6 - DLL Hijacking
CVSS 7.8
CVE-2024-4130 HIGH
Lenovo App Store < 9.0.17 - DLL Hijacking
CVSS 7.8
CVE-2024-4089 HIGH
Lenovo Super File - Privilege Escalation
CVSS 7.8
CVE-2024-33582 HIGH
Lenovo Service Framework - Privilege Escalation
CVSS 7.8
CVE-2024-33581 HIGH
Lenovo PC Manager AI - Privilege Escalation
CVSS 7.8
CVE-2024-33580 HIGH
Lenovo Personal Cloud - Privilege Escalation
CVSS 7.8
CVE-2024-33579 HIGH
Lenovo Baiying - Privilege Escalation
CVSS 7.8
CVE-2024-33578 HIGH
Lenovo Leyun - Privilege Escalation
CVSS 7.8
CVE-2024-47196 MEDIUM
ModelSim Questa < V2025.2 - Code Injection
CVSS 6.7
CVE-2024-47195 MEDIUM
ModelSim Questa < V2024.3 - Code Injection
CVSS 6.7
CVE-2024-47194 MEDIUM
ModelSim Questa < V2024.3 - Code Injection
CVSS 6.7
CVE-2024-45246 HIGH
Vynamic View < 5.9.5 - Uncontrolled Search Path Element
CVSS 7.3
CVE-2024-6769 MEDIUM
Microsoft Windows <2022 - Privilege Escalation
CVSS 6.7
CVE-2024-44168 MEDIUM
macOS < 13.7, < 14.7, < 15 - Unauthorized File System Modification via Library Injection
CVSS 5.5
CVE-2024-8766 MEDIUM
Acronis Cyber Protect <38235-39169 - Privilege Escalation
CVSS 6.7
CVE-2024-34016 MEDIUM
Acronis Cyber Protect Cloud Agent <38235 - Privilege Escalation
CVSS 6.5
Details
Vulnerabilities 1,171
Links
MITRE CWE Entry Search this CWE With Exploits