CWE-114 · File and Path Handling
Process Control
28CVEs
SortMost likely exploited
28 CVEs with CWE-114 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-23748In CISA KEVExploitedmDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a…Audinate · Audinate Dante Application Library for Windows · CVSS 7.8 · 2022-11-17 | 7.8 | 8.3% | 2022-11-17 |
| CVE-2020-11075Shell Escape in Anchore Engineanchore · anchore-engine · CVSS 7.7 · 2020-05-27 | 7.7 | 1.8% | 2020-05-27 |
| CVE-2024-32004Git vulnerable to Remote Code Execution while cloning special-crafted local repositoriesgit · git · CVSS 8.2 · 2024-05-14 | 8.2 | 1.4% | 2024-05-14 |
| CVE-2024-56346IBM AIX command executionIBM · AIX · CVSS 10 · 2025-03-18 | 10.0 | 1.1% | 2025-03-18 |
| CVE-2019-8461Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed.…Checkpoint · Check Point Endpoint Security Initial Client for Windows · 2019-08-29 | – | 1.1% | 2019-08-29 |
| CVE-2019-8458Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI.…Check Point · Check Point Endpoint Security Client for Windows, Anti-Malware blade · 2019-06-20 | – | 1.0% | 2019-06-20 |
| CVE-2024-56347IBM AIX command executionIBM · AIX · CVSS 9.6 · 2025-03-18 | 9.6 | 0.9% | 2025-03-18 |
| CVE-2021-25736Windows kube-proxy LoadBalancer contentionKubernetes · Kubernetes · CVSS 5.8 · 2023-10-30 | 5.8 | 0.9% | 2023-10-30 |
| CVE-2025-36250AIX Code ExecutionIBM · AIX · CVSS 10 · 2025-11-13 | 10.0 | 0.7% | 2025-11-13 |
| CVE-2026-92939vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEnginepatriksimek · vm2 · CVSS 9.9 · 2026-09-17 | 9.9 | 0.6% | 2026-09-17 |
| CVE-2020-11081osquery susceptible to DLL search order hijacking of zlib1.dllosquery · osquery · CVSS 5.3 · 2020-07-10 | 5.3 | 0.6% | 2020-07-10 |
| CVE-2025-36251AIX Command ExecutionIBM · AIX · CVSS 9.6 · 2025-11-13 | 9.6 | 0.5% | 2025-11-13 |
| CVE-2025-0160IBM FlashSystem code executionIBM · Storage Virtualize · CVSS 8.1 · 2025-02-28 | 8.1 | 0.5% | 2025-02-28 |
| CVE-2026-29046TinyWeb: HTTP Header Control Character Injection into CGI Environmentmaximmasiutin · TinyWeb · CVSS 9.2 · 2026-03-06 | 9.2 | 0.4% | 2026-03-06 |
| CVE-2023-40299Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment…Konghq · Insomnia · 2023-10-04 | – | 0.4% | 2023-10-04 |
| CVE-2020-6014Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load a non-existent DLL during a query for th…Checkpoint · Check Point Endpoint Security Client for Windows · 2020-10-30 | – | 0.4% | 2020-10-30 |
| CVE-2020-8107Process Control vulnerability in Bitdefender Antivirus PlusBitdefender · Antivirus Plus · CVSS 8.2 · 2022-02-18 | 8.2 | 0.3% | 2022-02-18 |
| CVE-2019-8453Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can allow a local attacker to replace a DLL…Checkpoint · Check Point ZoneAlarm · 2019-04-17 | – | 0.3% | 2019-04-17 |
| CVE-2026-94347PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 throu…Dell · PowerProtect Data Domain Virtual Edition · CVSS 7.2 · 2026-10-27 | 7.2 | 0.3% | 2026-10-27 |
| CVE-2024-25021IBM AIX command executionIBM · AIX · CVSS 8.4 · 2024-02-22 | 8.4 | 0.3% | 2024-02-22 |
| CVE-2020-6024Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local p…Checkpoint · Check Point SmartConsole · 2021-01-20 | – | 0.3% | 2021-01-20 |
| CVE-2024-44168A library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify…Apple · macOS · CVSS 5.5 · 2024-09-16 | 5.5 | 0.2% | 2024-09-16 |
| CVE-2024-8207MongoDB Server binaries may load potentially insecure shared libraries from specific relative pathsMongoDB Inc · MongoDB Server · CVSS 6.4 · 2024-08-27 | 6.4 | 0.2% | 2024-08-27 |
| CVE-2023-4487GE Digital CIMPLICITY Process ControlGE Digital · CIMPLICITY · CVSS 7.8 · 2023-09-05 | 7.8 | 0.2% | 2023-09-05 |
| CVE-2026-26945Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10,…Dell · Integrated Dell Remote Access Controller · CVSS 5.3 · 2026-03-18 | 5.3 | 0.2% | 2026-03-18 |
| CVE-2025-1950IBM Hardware Management Console - Power Systems command executionIBM · Hardware Management Console - Power Systems · CVSS 9.3 · 2025-04-22 | 9.3 | 0.2% | 2025-04-22 |
| CVE-2025-23385In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service b…JetBrains · ReSharper · CVSS 7.8 · 2025-01-28 | 7.8 | 0.1% | 2025-01-28 |
| CVE-2025-46370Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access could potentially explo…Dell · Alienware Command Center 6.x (AWCC) · CVSS 3.3 · 2025-11-13 | 3.3 | 0.1% | 2025-11-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.