Skip to content
Noroxi

CWE-426 · 668 records

Untrusted Search Path

CVEs in this class

668 records

  • CVE-2012-1854
    67This week

    Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basi

    HighCVSS 7.8KEVWeaponizedEPSS 20%

    microsoft · officeJul 10, 2012

  • CVE-2022-22047
    67This week

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 18%

    microsoft · windows 10 1507Jul 12, 2022

  • CVE-2015-0096
    58Plan

    Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S

    CriticalCVSS 9.3WeaponizedEPSS 70%

    microsoft · windows 7Mar 11, 2015

  • CVE-2023-30330
    41Plan

    SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defau

    CriticalCVSS 9.8Proof of conceptEPSS 5%

    softexpert · excellence suiteMay 11, 2023

  • CVE-2016-10009
    40Plan

    Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKC

    HighCVSS 7.3Proof of conceptEPSS 37%

    openbsd · opensshJan 4, 2017

  • CVE-2016-0016
    40Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    HighCVSS 7.8Proof of conceptEPSS 29%

    microsoft · windows 10Jan 13, 2016

  • CVE-2016-5330
    40Plan

    Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware W

    HighCVSS 7.8WeaponizedEPSS 18%

    vmware · workstation playerAug 7, 2016

  • CVE-2011-2019
    40Plan

    Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows

    CriticalCVSS 9.3No exploitEPSS 11%

    microsoft · internet explorerDec 13, 2011

  • CVE-2019-11660
    40Plan

    Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40.

    HighCVSS 7.8WeaponizedEPSS 7%

    microfocus · data protectorSep 13, 2019

  • CVE-2018-19486
    40Plan

    Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cas

    CriticalCVSS 9.8No exploitEPSS 4%

    linux · linux kernelNov 23, 2018

  • CVE-2020-15801
    40Plan

    In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations.

    CriticalCVSS 9.8No exploitEPSS 3%

    python · pythonJul 17, 2020

  • CVE-2011-4125
    40Plan

    A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute a

    CriticalCVSS 9.8No exploitEPSS 2%

    calibre-ebook · calibreOct 26, 2021

  • CVE-2022-26184
    40Plan

    Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when us

    CriticalCVSS 9.8No exploitEPSS 1%

    python-poetry · poetryMar 21, 2022

  • CVE-2024-32019
    40Plan

    ndsudo: local privilege escalation via untrusted search path

    HighCVSS 8.8WeaponizedEPSS 1%

    netdata · netdataApr 12, 2024

  • CVE-2026-95182
    40Plan

    An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening craf

    CriticalCVSS 10.0No exploitEPSS 0%

    Oct 16, 2026

  • CVE-2017-12414
    39Monitor

    Format Factory 4.1.0 has a DLL Hijacking Vulnerability because an untrusted search path is used for msimg32.dll, WindowsCodecs.dll, and dwma

    CriticalCVSS 9.8No exploitEPSS 1%

    pcfreetime · format factoryAug 3, 2017

  • CVE-2017-2225
    39Monitor

    Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL

    CriticalCVSS 9.8No exploitEPSS 1%

    mext · ebidsettingcheckerJul 7, 2017

  • CVE-2023-26036
    39Monitor

    ZoneMinder contains Local File Inclusion vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    zoneminder · zoneminderFeb 24, 2023

  • CVE-2024-35260
    39Monitor

    Microsoft Dataverse Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    microsoft · power platformJun 27, 2024

  • CVE-2022-3734
    39Monitor

    Redis on Windows dbghelp.dll uncontrolled search path

    CriticalCVSS 9.8No exploitEPSS 0%

    redis · redisOct 28, 2022

  • CVE-2024-38462
    39Monitor

    iRODS before 4.3.2 provides an msiSendMail function with a problematic dependency on the mail binary, such as in the mailMS.cpp#L94-L106 ref

    CriticalCVSS 9.8No exploitEPSS 0%

    irods · irodsJun 16, 2024

  • CVE-2025-26155
    39Monitor

    NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.

    CriticalCVSS 9.8No exploitEPSS 0%

    ncp-e · ncp secure entry clientNov 26, 2025

  • CVE-2026-78155
    39Monitor

    Untrusted Search Path in StackGres

    CriticalCVSS 9.9No exploitEPSS 0%

    ongres · stackgresAug 23, 2026

  • CVE-2012-2040
    38Monitor

    Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Ma

    CriticalCVSS 9.3No exploitEPSS 3%

    adobe · flash playerJun 8, 2012

  • CVE-2010-4833
    38Monitor

    Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via

    CriticalCVSS 9.3No exploitEPSS 2%

    gnome · gtkSep 6, 2011

All vulnerability classes