#cwe-427
共收录 126 条相关情报。
← 返回所有主题 漏洞预警2026-06-03 发布INFO
CVE-2026-44682
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock D
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-03 发布INFO
CVE-2026-44609
Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock D
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-47274
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb help
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2023-52945
Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2025-41670
A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating co
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-19 发布INFO
CVE-2025-14575
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-19 发布INFO
CVE-2026-32323
Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may
历史摘要 · 未重新核验 · NVD
安全公告2026-05-18 发布INFO
CVE-2026-47092
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-18 发布INFO
CVE-2026-47092
Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac
历史摘要 · 未重新核验 · NVD
安全公告2026-05-18 发布INFO
CVE-2026-41567
## Summary
When a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-15 发布INFO
CVE-2024-36333
A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potenti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-15 发布INFO
CVE-2026-7373
Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level contro
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-14 发布INFO
CVE-2025-62628
Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a mali
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2024-47091
Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a l
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-13 发布INFO
CVE-2026-44612
Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If the
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2026-20772
Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2025-36515
Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-12 发布INFO
CVE-2025-35969
Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-11 发布INFO
CVE-2026-45004
OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that l
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-07 发布INFO
CVE-2026-44406
ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM
历史摘要 · 未重新核验 · NVD