Skip to content

CWE-427 · weakness in File and Path Handling

Uncontrolled Search Path

1,201 CVEs · 3 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
3
likely to be exploited
5

Every one of the 1,201 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCVE-2020-3153Cisco · CVSS 6.5 · 29% likely

    Cisco

  2. Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCVE-2020-3433Cisco · CVSS 7.8 · 10% likely

    Cisco

  3. A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search…CVE-2026-110936Siemens · CVSS 6.7 · 1.0% likelycovered by CyberSIXT

    SiemensRomulus5 articles

  4. Git LFS 2.12.0 allows Remote Code Execution.CVE-2020-2795582% likely
  5. Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exist…CVE-2017-651746% likely
  6. Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with a…CVE-2024-48990needrestart · CVSS 7.8 · 29% likely
  7. Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially l…CVE-2019-9491Trend Micro · 13% likely

    Trend Micro

  8. Softing Secure Integration Server Uncontrolled Search Path ElementCVE-2022-2334Softing · CVSS 7.2 · 12% likely

    Softing

  9. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library f…CVE-2017-3092Adobe Digital Editions 4.5.4 and earlier. · 8.5% likely
  10. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library…CVE-2017-3090Adobe Digital Editions 4.5.4 and earlier. · 8.5% likely
  11. VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may a…CVE-2019-5526VMware Workstation · 8.5% likely
  12. DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.CVE-2014-83938.3% likely
  13. Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an…CVE-2024-48992needrestart · CVSS 7.8 · 8.0% likely
  14. Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer…CVE-2017-3097Adobe Digital Editions 4.5.4 and earlier. · 7.1% likely
  15. Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use o…CVE-2021-31156.9% likely
  16. Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege esc…CVE-2018-15976Adobe · 5.4% likely

    Adobe

  17. ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the 'working' folder through the 'Upload F…CVE-2022-23050ManageEngine AppManager15 · 5.0% likely
  18. Adobe application manager installer version 10.0 have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Arbitrary Code Execution in…CVE-2019-8076Adobe · 4.1% likely

    Adobe

  19. Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation.CVE-2018-12805Adobe Connect 9.7.5 and earlier · 4.1% likely
  20. The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regula…CVE-2021-30359Check Point Harmony Browse and SandBlast Agent for Browsers · 3.9% likely
  21. Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2019-7870Adobe · 3.8% likely

    Adobe

  22. Adobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionCVE-2021-28595Adobe · CVSS 7.8 · 3.8% likely

    Adobe

  23. Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL relat…CVE-2017-3013Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.2007… · 3.4% likely
  24. Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could l…CVE-2019-7956Adobe Dreamweaver · 3.3% likely
  25. Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to…CVE-2019-7093Adobe · 3.3% likely

    Adobe

  26. Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.CVE-2019-8062Adobe · CVSS 7.8 · 3.2% likely

    Adobe

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in