Vulnerabilities > Untrusted Search Path

DATE CVE VULNERABILITY TITLE RISK
2023-11-16 CVE-2023-26031 Untrusted Search Path vulnerability in Apache Hadoop 3.3.1/3.3.2/3.3.4
Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges.
network
high complexity
apache CWE-426
7.5
2023-11-14 CVE-2023-39202 Untrusted Search Path vulnerability in Zoom Rooms and Virtual Desktop Infrastructure
Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access.
local
low complexity
zoom CWE-426
5.5
2023-10-23 CVE-2021-26738 Untrusted Search Path vulnerability in Zscaler Client Connector 3.6
Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable.
local
low complexity
zscaler CWE-426
7.8
2023-09-12 CVE-2023-39201 Untrusted Search Path vulnerability in Zoom Cleanzoom
Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access.
local
low complexity
zoom CWE-426
6.7
2023-08-23 CVE-2023-41105 Untrusted Search Path vulnerability in multiple products
An issue was discovered in Python 3.11 through 3.11.4.
network
low complexity
python netapp CWE-426
7.5
2023-08-11 CVE-2022-43456 Untrusted Search Path vulnerability in Intel Rapid Storage Technology
Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-426
7.8
2023-08-08 CVE-2023-39212 Untrusted Search Path vulnerability in Zoom Rooms
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.
local
low complexity
zoom CWE-426
5.5
2023-08-08 CVE-2023-36540 Untrusted Search Path vulnerability in Zoom
Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
local
low complexity
zoom CWE-426
7.8
2023-07-11 CVE-2023-36536 Untrusted Search Path vulnerability in Zoom Rooms
Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
local
low complexity
zoom CWE-426
7.8
2023-06-26 CVE-2023-34144 Untrusted Search Path vulnerability in Trendmicro Apex ONE
An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34145.
local
low complexity
trendmicro CWE-426
7.8