#cwe-427

共收录 126 条相关情报。

← 返回所有主题
漏洞预警2026-06-03 发布INFO

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVE-2026-44682

Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-03 发布INFO

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.15051.93227.

CVE-2026-44609

Local privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock D

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb helper tools resolved external binaries through the PATH envi...

CVE-2026-47274

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, multiple pam_usb help

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unsp...

CVE-2023-52945

Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating configuration or application-related files located in user-...

CVE-2025-41670

A local user with low privileges may be able to influence the behavior of a privileged system service by manipulating co

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (Unix) allows a local attacker to load a rogue CA certific...

CVE-2025-14575

An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network (qtbase) in Qt Qt Framework (

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may allow local privilege escalation during installation or ...

CVE-2026-32323

Mullvad VPN is a VPN client app for desktop and mobile. When using macOS with versions 2026.1 and below, Mullvad VPN may

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability...

CVE-2026-47092

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attackers to execute arbitrary commands by manipulating the CO...

CVE-2026-47092

Claude HUD through 0.0.12, patched in commit 234d9aa, contains a command injection vulnerability that allows local attac

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

Docker: `PUT /containers/{id}/archive` executes container binary on the host

CVE-2026-41567

## Summary When a user uploads a compressed archive into a container, a malicious image can execute arbitrary code with

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-15 发布INFO

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

CVE-2024-36333

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potenti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-15 发布INFO

Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level control of a Windows host. Upon startup the metasploitPostgreSQ...

CVE-2026-7373

Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows users to gain SYSTEM level contro

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentially resulting in arbitrary code execut...

CVE-2025-62628

Unsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a mali

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a local unprivileged user able to create a Windows service w...

CVE-2024-47091

Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.2.0 (EOL) allows a l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-13 发布INFO

Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If there is a crafted DLL at the same directory when invoking t...

CVE-2026-44612

Bytello Share (Windows Edition) installer executable provided by Bytello insecurely loads Dynamic Link Libraries. If the

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: User Applications may allow an escalat...

CVE-2026-20772

Uncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software ...

CVE-2025-36515

Uncontrolled search path for some AI Playground software before version 3.0.0 alpha within Ring 3: User Applications may

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege....

CVE-2025-35969

Uncontrolled search path for some Intel(R) Server Firmware Update Utility Software before version 16.0.12. within Ring 3

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that loads setup-api.js from process.cwd() during provider setu...

CVE-2026-45004

OpenClaw before 2026.4.23 contains an arbitrary code execution vulnerability in the bundled plugin setup resolver that l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-07 发布INFO

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM privileges, successful hijacking enables local arbitrary...

CVE-2026-44406

ZTE Cloud PC client uSmartView contains a DLL hijacking vulnerability; since uSmartViewServiceAgent.exe runs with SYSTEM

历史摘要 · 未重新核验 · NVD