CWE-114 · 25 records

Process Control

CVEs in this class

25 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
63This week	CVE-2022-23748Weaponized	mDNSResponder.exe is vulnerable to DLL Sideloading attack.audinate · dante application library · CWE-114	High7.8	KEV	8.3%	Nov 17, 2022
40Plan	CVE-2020-11075No exploit	Shell Escape in Anchore Engineanchore · engine · CWE-114	Critical9.9	—	1.8%	May 27, 2020
40Plan	CVE-2024-56346No exploit	IBM AIX command executionibm · aix · CWE-114 pre-auth RCE	Critical10.0	—	1.1%	Mar 18, 2025
39Monitor	CVE-2025-36250No exploit	IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to ibm · vios · CWE-114 pre-auth RCE	Critical9.8	—	0.6%	Nov 13, 2025
39Monitor	CVE-2025-36251No exploit	AIX Command Executionibm · vios · CWE-114 pre-auth RCE	Critical9.8	—	0.5%	Nov 13, 2025
39Monitor	CVE-2025-0160No exploit	IBM FlashSystem code executionibm · storage virtualize · CWE-114 pre-auth RCE	Critical9.8	—	0.5%	Feb 28, 2025
38Monitor	CVE-2024-56347No exploit	IBM AIX command executionibm · aix · CWE-114 pre-auth RCE	Critical9.6	—	0.9%	Mar 18, 2025
37Monitor	CVE-2026-92939No exploit	vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEnginepatriksimek · vm2 · CWE-114	Critical9.4	—	0.6%	Sep 17, 2026
33Monitor	CVE-2024-25021No exploit	IBM AIX command executionibm · vios · CWE-114 RCE Local privilege escalation	High8.4	—	0.2%	Feb 22, 2024
32Monitor	CVE-2020-11081No exploit	osquery susceptible to DLL search order hijacking of zlib1.dlllinuxfoundation · osquery · CWE-114 Local privilege escalation	High8.2	—	0.5%	Jul 10, 2020
31Monitor	CVE-2024-32004Proof of concept	Git vulnerable to Remote Code Execution while cloning special-crafted local repositoriesgit-scm · git · CWE-114 RCE	High7.8	—	1.3%	May 14, 2024
31Monitor	CVE-2019-8461No exploit	Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean imcheckpoint · capsule docs standalone client · CWE-114	High7.8	—	1.1%	Aug 29, 2019
31Monitor	CVE-2023-40299No exploit	Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by usingkonghq · insomnia · CWE-114	High7.8	—	0.4%	Oct 4, 2023
31Monitor	CVE-2020-8107No exploit	Process Control vulnerability in Bitdefender Antivirus Plusbitdefender · antivirus plus · CWE-114	High7.8	—	0.3%	Feb 18, 2022
31Monitor	CVE-2020-6024No exploit	Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54checkpoint · smartconsole · CWE-114 Local privilege escalation	High7.8	—	0.2%	Jan 20, 2021
31Monitor	CVE-2023-4487No exploit	GE Digital CIMPLICITY Process Controlge · cimplicity · CWE-114 Local privilege escalation	High7.8	—	0.2%	Sep 5, 2023
31Monitor	CVE-2025-1950No exploit	IBM Hardware Management Console - Power Systems command executionibm · hardware management console · CWE-114 RCE	High7.8	—	0.2%	Apr 22, 2025
31Monitor	CVE-2025-23385No exploit	In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 202jetbrains · dottrace · CWE-114 Local privilege escalation	High7.8	—	0.1%	Jan 28, 2025
26Monitor	CVE-2020-6014No exploit	Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load acheckpoint · endpoint security · CWE-114 Local privilege escalation	Medium6.5	—	0.3%	Nov 2, 2020
26Monitor	CVE-2024-8207No exploit	MongoDB Server binaries may load potentially insecure shared libraries from specific relative pathsmongodb · mongodb · CWE-114	Medium6.7	—	0.2%	Aug 27, 2024
25Monitor	CVE-2021-25736No exploit	Windows kube-proxy LoadBalancer contentionkubernetes · kubernetes · CWE-114	Medium6.3	—	0.9%	Oct 29, 2023
22Monitor	CVE-2019-8453No exploit	Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions.checkpoint · zonealarm · CWE-114 Denial of service	Medium5.5	—	0.3%	Apr 17, 2019
22Monitor	CVE-2025-46370No exploit	Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability.dell · alienware command center · CWE-114 Local privilege escalation	Medium5.5	—	0.1%	Nov 13, 2025
21Monitor	CVE-2026-26945No exploit	Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrdell · integrated dell remote access controller · CWE-114	Medium5.3	—	0.2%	Mar 18, 2026
17Monitor	CVE-2019-8458No exploit	Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLLcheckpoint · endpoint security clients · CWE-114 Denial of service	Medium4.4	—	0.9%	Jun 20, 2019

CVE-2022-23748
63This week
mDNSResponder.exe is vulnerable to DLL Sideloading attack.
HighCVSS 7.8KEVWeaponizedEPSS 8%
audinate · dante application libraryNov 17, 2022
CVE-2020-11075
40Plan
Shell Escape in Anchore Engine
CriticalCVSS 9.9No exploitEPSS 1%
anchore · engineMay 27, 2020
CVE-2024-56346
40Plan
IBM AIX command execution
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
ibm · aixMar 18, 2025
CVE-2025-36250
39Monitor
IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
ibm · viosNov 13, 2025
CVE-2025-36251
39Monitor
AIX Command Execution
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
ibm · viosNov 13, 2025
CVE-2025-0160
39Monitor
IBM FlashSystem code execution
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
ibm · storage virtualizeFeb 28, 2025
CVE-2024-56347
38Monitor
IBM AIX command execution
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
ibm · aixMar 18, 2025
CVE-2026-92939
37Monitor
vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine
CriticalCVSS 9.4No exploitEPSS 0%
patriksimek · vm2Sep 17, 2026
CVE-2024-25021
33Monitor
IBM AIX command execution
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
ibm · viosFeb 22, 2024
CVE-2020-11081
32Monitor
osquery susceptible to DLL search order hijacking of zlib1.dll
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
linuxfoundation · osqueryJul 10, 2020
CVE-2024-32004
31Monitor
Git vulnerable to Remote Code Execution while cloning special-crafted local repositories
HighCVSS 7.8Proof of conceptEPSS 1%
- RCE
git-scm · gitMay 14, 2024
CVE-2019-8461
31Monitor
Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean im
HighCVSS 7.8No exploitEPSS 1%
checkpoint · capsule docs standalone clientAug 29, 2019
CVE-2023-40299
31Monitor
Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using
HighCVSS 7.8No exploitEPSS 0%
konghq · insomniaOct 4, 2023
CVE-2020-8107
31Monitor
Process Control vulnerability in Bitdefender Antivirus Plus
HighCVSS 7.8No exploitEPSS 0%
bitdefender · antivirus plusFeb 18, 2022
CVE-2020-6024
31Monitor
Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
checkpoint · smartconsoleJan 20, 2021
CVE-2023-4487
31Monitor
GE Digital CIMPLICITY Process Control
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
ge · cimplicitySep 5, 2023
CVE-2025-1950
31Monitor
IBM Hardware Management Console - Power Systems command execution
HighCVSS 7.8No exploitEPSS 0%
- RCE
ibm · hardware management consoleApr 22, 2025
CVE-2025-23385
31Monitor
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 202
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
jetbrains · dottraceJan 28, 2025
CVE-2020-6014
26Monitor
Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a
MediumCVSS 6.5No exploitEPSS 0%
- Local privilege escalation
checkpoint · endpoint securityNov 2, 2020
CVE-2024-8207
26Monitor
MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths
MediumCVSS 6.7No exploitEPSS 0%
mongodb · mongodbAug 27, 2024
CVE-2021-25736
25Monitor
Windows kube-proxy LoadBalancer contention
MediumCVSS 6.3No exploitEPSS 0%
kubernetes · kubernetesOct 29, 2023
CVE-2019-8453
22Monitor
Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
checkpoint · zonealarmApr 17, 2019
CVE-2025-46370
22Monitor
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability.
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
dell · alienware command centerNov 13, 2025
CVE-2026-26945
21Monitor
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integr
MediumCVSS 5.3No exploitEPSS 0%
dell · integrated dell remote access controllerMar 18, 2026
CVE-2019-8458
17Monitor
Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL
MediumCVSS 4.4No exploitEPSS 0%
- Denial of service
checkpoint · endpoint security clientsJun 20, 2019

All vulnerability classes