#cwe-427

共收录 126 条相关情报。

← 返回所有主题
漏洞预警2026-08-20 发布INFO

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.

CVE-2026-55013

Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locall

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If th...

CVE-2026-59781

When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-17 发布INFO

An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file.

CVE-2026-50773

An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated priv...

CVE-2026-0294

A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS device

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-12 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.

CVE-2026-16860

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolle

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...

CVE-2025-54512

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to e

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege. Unpri...

CVE-2026-34175

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of privileg...

CVE-2026-32788

Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a...

CVE-2026-28700

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escala

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting ...

CVE-2025-8087

A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary co...

CVE-2025-48506

Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-11 发布INFO

Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution.

CVE-2025-0041

Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-10 发布INFO

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path...

CVE-2026-13133

A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitrary code with the privileges of the application by placin...

CVE-2026-9169

DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows allows a local attacker to execute arbitr

历史摘要 · 未重新核验 · NVD

安全公告2026-08-04 发布INFO

An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a...

CVE-2026-18657

An uncontrolled search path element in Kiro CLI before version 2.10.0 on Windows might allow a remote unauthenticated ac

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-04 发布INFO

An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a...

CVE-2026-18656

An uncontrolled search path element in Kiro IDE before version 1.0.228 on Windows might allow a remote unauthenticated a

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-03 发布INFO

Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to execute arbitrary binaries by supplying a malicious Ghidra p...

CVE-2026-18718

Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allows an attacker to exe

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of the component Kernel Mini-Filter Driver. ...

CVE-2026-18605

A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown function in the library A

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-03 发布INFO

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the debug interface by placing a crafted file in the applicat...

CVE-2026-9593

A vulnerability in the iDTM FDI allows an attacker with elevated privileges and access to the host system to enable the

历史摘要 · 未重新核验 · NVD

安全公告2026-07-28 发布INFO

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that...

CVE-2026-48388

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in

历史摘要 · 未重新核验 · GitHub Advisory