CWE-427

Uncontrolled Search Path Element

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

1,168 vulnerabilities with CWE-427
CVE-2025-33208 HIGH
NVIDIA TAO - Uncontrolled Search Path Element
CVSS 8.8
CVE-2025-66476 HIGH
Vim < 9.1.1947 - Uncontrolled Search Path Element on Windows via Current Working Directory
CVSS 7.8
CVE-2025-11772 MEDIUM
Synaptics < unknown - Code Injection
CVSS 6.6
CVE-2025-64772 HIGH
INZONE Hub <1.0.17.0 - Code Injection
CVSS 7.8
CVE-2025-64695 HIGH
LogStare Collector < 2.4.2 - Uncontrolled Search Path Element in Installer
CVSS 7.8
CVE-2025-13051 CRITICAL
ABP <2.0.7.9050 - Authenticated Privilege Escalation
CVE-2025-12852 HIGH
NEC RakurakuMusen Start EX - Code Injection
CVE-2025-10089 HIGH
MILCO.S Setting App - Code Injection
CVSS 7.7
CVE-2025-64726 HIGH
Socket Firewall <0.15.5 - Malicious Project Config Code Execution
CVE-2025-40827 HIGH
Siemens Software Center, Solid Edge SE2025 <V3.5-V225.0 Update 10 -...
CVSS 7.8
CVE-2025-40763 HIGH
Altair Grid Engine < V2026.0.0 - Code Injection
CVSS 7.8
CVE-2025-35972 MEDIUM
Intel MPI Library <2021.16 - Privilege Escalation
CVSS 6.7
CVE-2025-32038 MEDIUM
Intel oneAPI DPC++C++ Compiler <2025.0.1 - Privilege Escalation
CVSS 6.7
CVE-2025-32001 MEDIUM
Intel(R) Processor Identification Utility <8.0.43 - Privilege Escal...
CVSS 6.7
CVE-2025-31931 MEDIUM
ITT API <3.25.4 - Privilege Escalation
CVSS 6.7
CVE-2025-31647 MEDIUM
Intel(R) Graphics Software <25.22.1502.2 - Privilege Escalation
CVSS 6.7
CVE-2025-31645 MEDIUM
System Event Log Viewer Utility - Privilege Escalation
CVSS 6.7
CVE-2025-30506 MEDIUM
Intel Driver and Support Assistant <25.2 - Privilege Escalation
CVSS 6.7
CVE-2025-30182 MEDIUM
Intel(R) Distribution for Python <2025.2.0 - Privilege Escalation
CVSS 6.7
CVE-2025-25059 MEDIUM
Intel(R) OFU <14.1.31 - Privilege Escalation
CVSS 6.7
CVE-2025-24842 MEDIUM
Intel(R) System Support Utility <4.1.0 - Privilege Escalation
CVSS 6.7
CVE-2025-24491 MEDIUM
Intel(R) Killer(TM) Performance Suite <killer 4.0 40.25.509.1465 - ...
CVSS 6.7
CVE-2025-20065 MEDIUM
Display Virtualization for Windows OS <1797 - Privilege Escalation
CVSS 6.7
CVE-2025-20050 MEDIUM
Intel(R) CIP <WIN_DCA_2.4.0.11001 - Privilege Escalation
CVSS 6.7
CVE-2025-23358 HIGH
NVIDIA NVApp < 11.0.5.260 - Uncontrolled Search Path Element in Installer
CVSS 8.2
Details
Vulnerabilities 1,168
Links
MITRE CWE Entry Search this CWE With Exploits