Vulnerabilities > Uncontrolled Search Path Element

DATE CVE VULNERABILITY TITLE RISK
2021-09-27 CVE-2021-40981 Uncontrolled Search Path Element vulnerability in Asus Armoury Crate Lite Service
ASUS ROG Armoury Crate Lite before 4.2.10 allows local users to gain privileges by placing a Trojan horse file in the publicly writable %PROGRAMDATA%\ASUS\GamingCenterLib directory.
local
low complexity
asus CWE-427
7.3
2021-09-24 CVE-2021-28130 Uncontrolled Search Path Element vulnerability in Drweb Security Space 12.5.2.4160
Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web.
local
low complexity
drweb CWE-427
7.8
2021-09-23 CVE-2021-26750 Uncontrolled Search Path Element vulnerability in Pandasecurity Panda Adaptive Defense 360 and Panda Devices Agent
DLL hijacking in Panda Agent <=1.16.11 in Panda Security, S.L.U.
local
low complexity
pandasecurity CWE-427
7.8
2021-09-22 CVE-2021-31847 Uncontrolled Search Path Element vulnerability in Mcafee Agent
Improper access control vulnerability in the repair process for McAfee Agent for Windows prior to 5.7.4 could allow a local attacker to perform a DLL preloading attack using unsigned DLLs.
local
low complexity
mcafee CWE-427
7.8
2021-09-08 CVE-2021-36216 Uncontrolled Search Path Element vulnerability in Linecorp Line
LINE for Windows 6.2.1.2289 and before allows arbitrary code execution via malicious DLL injection.
local
low complexity
linecorp CWE-427
7.8
2021-09-02 CVE-2021-22775 Uncontrolled Search Path Element vulnerability in Schneider-Electric Gp-Pro EX
A CWE-427: Uncontrolled Search Path Element vulnerability exists in GP-Pro EX,V4.09.250 and prior, that could cause local code execution with elevated privileges when installing the software.
local
low complexity
schneider-electric CWE-427
7.8
2021-08-26 CVE-2021-20793 Uncontrolled Search Path Element vulnerability in Sony Audio USB Driver and HAP Music Transfer
Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.
local
low complexity
sony CWE-427
7.8
2021-08-24 CVE-2021-28594 Uncontrolled Search Path Element vulnerability in Adobe Creative Cloud Desktop Application 2.4
Adobe Creative Cloud Desktop Application (installer) version 2.4 (and earlier) is affected by an Uncontrolled Search Path Element vulnerability.
local
low complexity
adobe CWE-427
7.8
2021-08-20 CVE-2021-28595 Uncontrolled Search Path Element vulnerability in Adobe Dimension
Adobe Dimension version 3.4 (and earlier) is affected by an Uncontrolled Search Path Element element.
local
low complexity
adobe CWE-427
7.8
2021-08-20 CVE-2021-28636 Uncontrolled Search Path Element vulnerability in Adobe Acrobat DC and Acrobat Reader DC
Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by an Uncontrolled Search Path Element vulnerability.
local
low complexity
adobe CWE-427
7.3