CWE-426 · File and Path Handling
Untrusted Search Path
651CVEs
2exploited
0with a public check
11likely (EPSS 10%+)
SortMost likely exploited
651 CVEs with CWE-426 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2012-1854In CISA KEVExploitedUntrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Mi…Microsoft · Visual Basic for Applications (VBA) · CVSS 7.8 · 2012-07-10 | 7.8 | 21% | 2012-07-10 |
| CVE-2022-22047In CISA KEVExploitedWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2022-07-12 | 7.8 | 18% | 2022-07-12 |
| CVE-2015-0096Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Ser…Microsoft · Windows 7 · 2015-03-11 | – | 71% | 2015-03-11 |
| CVE-2016-10009Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over…Openbsd · Openssh · CVSS 7.3 · 2017-01-05 | 7.3 | 37% | 2017-01-05 |
| CVE-2016-0016Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Go…Microsoft · Windows 10 · 2016-01-13 | – | 30% | 2016-01-13 |
| CVE-2018-12589Polaris Office 2017 8.1 allows attackers to execute arbitrary code via a Trojan horse puiframeworkproresenu.dll file in the current working directory.Polarisoffice · Polaris Office 2017 · 2018-06-28 | – | 20% | 2018-06-28 |
| CVE-2016-5330Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VM…Vmware · Workstation Player · 2016-08-08 | – | 19% | 2016-08-08 |
| CVE-2019-12569A vulnerability in Viber before 10.7.0 for Desktop (Windows) could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search…Rakuten · Viber · 2019-06-03 | – | 15% | 2019-06-03 |
| CVE-2014-0315Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,…Microsoft · Windows 7 · 2014-04-08 | – | 15% | 2014-04-08 |
| CVE-2016-0018Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a craf…Microsoft · Windows 10 · 2016-01-13 | – | 13% | 2016-01-13 |
| CVE-2011-2019Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Tr…Microsoft · Internet Explorer · 2011-12-14 | – | 11% | 2011-12-14 |
| CVE-2020-1458A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Ex…Microsoft · Microsoft 365 Apps for Enterprise for 32-bit Systems · 2020-07-14 | – | 11% | 2020-07-14 |
| CVE-2019-0809A remote code execution vulnerability exists when the Visual Studio C++ Redistributable Installer improperly validates input before loading dynamic link library (DLL) files, aka '…Microsoft · Microsoft Visual Studio 2017 · 2019-04-09 | – | 11% | 2019-04-09 |
| CVE-2018-0598Untrusted search path vulnerability in Self-extracting archive files created by IExpress bundled with Microsoft Windows allows an attacker to gain privileges via a Trojan horse DL…Microsoft · Self-extracting archive files created by IExpress bundled with Microsoft Windows · 2018-06-26 | – | 9.9% | 2018-06-26 |
| CVE-2010-3190Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C+…Microsoft · Visual C++ · CVSS 7.8 · 2010-08-31 | 7.8 | 8.7% | 2010-08-31 |
| CVE-2022-41953Git clone remote code execution vulnerability in git-for-windowsgit-for-windows · git · CVSS 8.6 · 2023-01-17 | 8.6 | 8.0% | 2023-01-17 |
| CVE-2019-11660Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privi…Microfocus · Data Protector · 2019-09-13 | – | 7.8% | 2019-09-13 |
| CVE-2024-26198Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft · Microsoft Exchange Server 2019 Cumulative Update 14 · CVSS 8.8 · 2024-03-12 | 8.8 | 6.8% | 2024-03-12 |
| CVE-2023-30330SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.Softexpert · Excellence Suite · CVSS 9.8 · 2023-05-12 | 9.8 | 5.9% | 2023-05-12 |
| CVE-2018-0597Untrusted search path vulnerability in the installer of Visual Studio Code allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · The installer of Visual Studio Code · 2018-06-26 | – | 5.4% | 2018-06-26 |
| CVE-2018-0596Untrusted search path vulnerability in the installer of Visual Studio Community allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · The installer of Visual Studio Community · 2018-06-26 | – | 5.4% | 2018-06-26 |
| CVE-2018-0595Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · The installer of Skype for Windows · 2018-06-26 | – | 5.4% | 2018-06-26 |
| CVE-2018-0594Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · Skype for Windows · 2018-06-26 | – | 5.4% | 2018-06-26 |
| CVE-2018-0593Untrusted search path vulnerability in the installer of Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · The installer of Microsoft OneDrive · 2018-06-26 | – | 5.4% | 2018-06-26 |
| CVE-2018-0592Untrusted search path vulnerability in Microsoft OneDrive allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · Microsoft OneDrive · 2018-06-26 | – | 5.4% | 2018-06-26 |
| CVE-2014-8358Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) us…Huawei · Ec156 Firmware · 2017-12-11 | – | 5.2% | 2017-12-11 |
| CVE-2018-0599Untrusted search path vulnerability in the installer of Visual C++ Redistributable allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · The installer of Visual C++ Redistributable · 2018-06-26 | – | 5.0% | 2018-06-26 |
| CVE-2018-5003Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privileg…Adobe · Adobe Creative Cloud Desktop Application before 4.5.5.342 · 2018-08-29 | – | 4.8% | 2018-08-29 |
| CVE-2019-20358Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially l…Trend Micro · Trend Micro Anti-Threat Toolkit (ATTK) · 2020-01-30 | – | 4.6% | 2020-01-30 |
| CVE-2019-5922Untrusted search path vulnerability in The installer of Microsoft Teams allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · The installer of Microsoft Teams · 2019-03-12 | – | 4.6% | 2019-03-12 |
| CVE-2019-5921Untrusted search path vulnerability in Windows 7 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.Microsoft · Windows 7 · 2019-03-12 | – | 4.6% | 2019-03-12 |
| CVE-2018-15974Adobe Framemaker versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege escalation.Adobe · Adobe Framemaker · 2018-10-17 | – | 4.6% | 2018-10-17 |
| CVE-2018-17980NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated…Nomachine · Nomachine · 2018-10-15 | – | 4.6% | 2018-10-15 |
| CVE-2016-1417Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is…Snort · Snort · 2017-01-23 | – | 4.4% | 2017-01-23 |
| CVE-2018-19486Git before 2.19.2 on Linux and UNIX executes commands from the current working directory (as if '.' were at the end of $PATH) in certain cases involving the run_command() API and…Git-Scm · Git · 2018-11-23 | – | 4.1% | 2018-11-23 |
| CVE-2012-2040Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x bef…Adobe · Flash Player · 2012-06-09 | – | 4.0% | 2012-06-09 |
| CVE-2019-11351TeamSpeak 3 Client before 3.2.5 allows remote code execution in the Qt framework.Teamspeak · Teamspeak · 2019-04-19 | – | 3.9% | 2019-04-19 |
| CVE-2017-6798Trend Micro Endpoint Sensor 1.6 before b1290 has a DLL hijacking vulnerability that allows remote attackers to execute arbitrary code, aka Trend Micro Vulnerability Identifier 201…Trendmicro · Endpoint Sensor · 2017-03-10 | – | 3.9% | 2017-03-10 |
| CVE-2020-15801In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The <executable-name>._pth file (e.g., t…Python · Python · 2020-07-17 | – | 3.6% | 2020-07-17 |
| CVE-2024-13158An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with…Ivanti · Endpoint Manager · CVSS 7.2 · 2025-01-14 | 7.2 | 3.4% | 2025-01-14 |
| CVE-2018-4927Adobe InDesign versions 13.0 and below have an exploitable Untrusted Search Path vulnerability. Successful exploitation could lead to local privilege escalation.Adobe · InDesign 13.0 and below · 2018-05-19 | – | 3.4% | 2018-05-19 |
| CVE-2017-12892Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL l…Foxitsoftware · Pdf Compressor · 2017-08-16 | – | 3.3% | 2017-08-16 |
| CVE-2025-23266NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated pe…NVIDIA · Container Toolkit · CVSS 9 · 2025-07-17 | 9.0 | 3.3% | 2025-07-17 |
| CVE-2018-15983Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to priv…Adobe · Flash Player · 2019-01-18 | – | 3.3% | 2019-01-18 |
| CVE-2017-2983Adobe Shockwave versions 12.2.7.197 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to escalation of privilege.Adobe · Adobe Shockwave 12.2.7.197 and earlier. · 2017-03-14 | – | 3.0% | 2017-03-14 |
| CVE-2018-10904It was found that glusterfs server does not properly sanitize file paths in the "trusted.io-stats-dump" extended attribute which is used by the "debug/io-stats" translator. Attack…Red Hat · glusterfs · CVSS 8.8 · 2018-09-04 | 8.8 | 3.0% | 2018-09-04 |
| CVE-2020-4545IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper loading of Dynamic Link Libraries by the import feature. By pers…IBM · Aspera Connect · CVSS 7.8 · 2020-09-04 | 7.8 | 3.0% | 2020-09-04 |
| CVE-2017-2149Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC functionality Software Update Tool V1.00.03 and earlier, SDHC Memory…Toshiba Corporation · Installer for SDHC/SDXC Memory Card with embedded NFC functionality Software Up… · 2017-04-28 | – | 3.0% | 2017-04-28 |
| CVE-2017-16997elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIGIN for a privileged (setuid or AT_SECURE) program, which all…Gnu · glibc 2.19 through 2.26 · 2017-12-18 | – | 2.9% | 2017-12-18 |
| CVE-2023-36003XAML Diagnostics Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.7 · 2023-12-12 | 6.7 | 2.8% | 2023-12-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.