Skip to content

CWE-426 · weakness in File and Path Handling

Untrusted Search Path

651 CVEs · 2 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
2
likely to be exploited
11

Every one of the 651 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Mi…CVE-2012-1854Microsoft · CVSS 7.8 · 21% likelycovered by CyberSIXT

    Microsoft

  2. Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityCVE-2022-22047Microsoft · CVSS 7.8 · 18% likely

    Microsoft

  3. Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Ser…CVE-2015-009671% likely
  4. Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over…CVE-2016-10009CVSS 7.3 · 37% likely
  5. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Go…CVE-2016-001630% likely
  6. Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.CVE-2018-1258920% likely
  7. Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VM…CVE-2016-533019% likely
  8. A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search…CVE-2019-1256915% likely
  9. Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…CVE-2014-031515% likely
  10. Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a craf…CVE-2016-001813% likely
  11. Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Tr…CVE-2011-201911% likely
  12. A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Ex…CVE-2020-1458Microsoft · 11% likely

    Microsoft

  13. A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka '…CVE-2019-0809Microsoft · 11% likely

    Microsoft

  14. Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DL…CVE-2018-0598Microsoft · 9.9% likely

    Microsoft

  15. Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C+…CVE-2010-3190CVSS 7.8 · 8.7% likely
  16. Git clone remote code execution vulnerability in git-for-windowsCVE-2022-41953git-for-windows · CVSS 8.6 · 8.0% likely

    Git-For-Windows

  17. Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privi…CVE-2019-11660Data Protector · 7.8% likely
  18. Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2024-26198Microsoft · CVSS 8.8 · 6.8% likely

    Microsoft

  19. SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.CVE-2023-30330CVSS 9.8 · 5.9% likely
  20. Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0597Microsoft · 5.4% likely

    Microsoft

  21. Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0596Microsoft · 5.4% likely

    Microsoft

  22. Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0595Microsoft · 5.4% likely

    Microsoft

  23. Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0594Microsoft · 5.4% likely

    Microsoft

  24. Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0593Microsoft · 5.4% likely

    Microsoft

  25. Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2018-0592Microsoft · 5.4% likely

    Microsoft

  26. Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) us…CVE-2014-83585.2% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in