CWE-427 · File and Path Handling
Uncontrolled Search Path
1,201CVEs
3exploited
0with a public check
5likely (EPSS 10%+)
SortMost likely exploited
1,201 CVEs with CWE-427 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-3153In CISA KEVExploitedCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityCisco · Cisco AnyConnect Secure Mobility Client · CVSS 6.5 · 2020-02-19 | 6.5 | 29% | 2020-02-19 |
| CVE-2020-3433In CISA KEVExploitedCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityCisco · Cisco AnyConnect Secure Mobility Client · CVSS 7.8 · 2020-08-17 | 7.8 | 10% | 2020-08-17 |
| CVE-2026-110936In CISA KEVExploitedA vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link libraries (DLLs) from an uncontrolled search…Siemens · Siemens Software Center · CVSS 6.7 · 2026-10-15 | 6.7 | 1.0% | 2026-10-15 |
| CVE-2020-27955Git LFS 2.12.0 allows Remote Code Execution.Git Large File Storage Project · Git Large File Storage · 2020-11-05 | – | 82% | 2020-11-05 |
| CVE-2017-6517Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exist…Microsoft · Skype · 2017-03-23 | – | 46% | 2017-03-23 |
| CVE-2024-48990Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Python interpreter with a…needrestart · needrestart · CVSS 7.8 · 2024-11-19 | 7.8 | 29% | 2024-11-19 |
| CVE-2019-9491Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially l…Trend Micro · Trend Micro Anti-Threat Toolkit (ATTK) · 2019-10-21 | – | 13% | 2019-10-21 |
| CVE-2022-2334Softing Secure Integration Server Uncontrolled Search Path ElementSofting · Secure Integration Server · CVSS 7.2 · 2022-08-17 | 7.2 | 12% | 2022-08-17 |
| CVE-2017-3092Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of editor control library f…Adobe · Adobe Digital Editions 4.5.4 and earlier. · 2017-06-20 | – | 8.5% | 2017-06-20 |
| CVE-2017-3090Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading of browser related library…Adobe · Adobe Digital Editions 4.5.4 and earlier. · 2017-06-20 | – | 8.5% | 2017-06-20 |
| CVE-2019-5526VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may a…Vmware · VMware Workstation · 2019-05-15 | – | 8.5% | 2019-05-15 |
| CVE-2014-8393DLL Hijacking vulnerability in CorelDRAW X7, Corel Photo-Paint X7, Corel PaintShop Pro X7, Corel Painter 2015, and Corel PDF Fusion.Corel · Coreldraw · 2017-08-28 | – | 8.3% | 2017-08-28 |
| CVE-2024-48992Qualys discovered that needrestart, before version 3.8, allows local attackers to execute arbitrary code as root by tricking needrestart into running the Ruby interpreter with an…needrestart · needrestart · CVSS 7.8 · 2024-11-19 | 7.8 | 8.0% | 2024-11-19 |
| CVE-2017-3097Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability is due to unsafe library loading functions in the installer…Adobe · Adobe Digital Editions 4.5.4 and earlier. · 2017-06-20 | – | 7.1% | 2017-06-20 |
| CVE-2021-3115Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the "go get" command to fetch modules that make use o…Golang · Go · 2021-01-26 | – | 6.9% | 2021-01-26 |
| CVE-2018-15976Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to privilege esc…Adobe · Adobe Technical Communications Suite · 2018-10-17 | – | 5.4% | 2018-10-17 |
| CVE-2022-23050ManageEngine AppManager15 (Build No:15510) allows an authenticated admin user to upload a DLL file to perform a DLL hijack attack inside the 'working' folder through the 'Upload F…Zohocorp · ManageEngine AppManager15 · 2022-05-24 | – | 5.0% | 2022-05-24 |
| CVE-2019-8076Adobe application manager installer version 10.0 have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could lead to Arbitrary Code Execution in…Adobe · Application Manager · 2019-09-12 | – | 4.1% | 2019-09-12 |
| CVE-2018-12805Adobe Connect versions 9.7.5 and earlier have an Insecure Library Loading vulnerability. Successful exploitation could lead to privilege escalation.Adobe · Adobe Connect 9.7.5 and earlier · 2018-07-20 | – | 4.1% | 2018-07-20 |
| CVE-2021-30359The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regula…Checkpoint · Check Point Harmony Browse and SandBlast Agent for Browsers · 2021-10-22 | – | 3.9% | 2021-10-22 |
| CVE-2019-7870Adobe Character Animator versions 2.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Adobe Character Animator · 2019-08-14 | – | 3.8% | 2019-08-14 |
| CVE-2021-28595Adobe Dimension Uncontrolled Search Path Element Could Lead To Remote Code ExecutionAdobe · Dimension · CVSS 7.8 · 2021-08-20 | 7.8 | 3.8% | 2021-08-20 |
| CVE-2017-3013Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in a DLL relat…Adobe · Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.2007… · 2017-04-12 | – | 3.4% | 2017-04-12 |
| CVE-2019-7956Adobe Dreamweaver direct download installer versions 19.0 and below, 18.0 and below have an Insecure Library Loading (DLL hijacking) vulnerability. Successful exploitation could l…Adobe · Adobe Dreamweaver · 2019-07-18 | – | 3.3% | 2019-07-18 |
| CVE-2019-7093Creative Cloud Desktop Application (installer) versions 4.7.0.400 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to…Adobe · Creative Cloud Desktop Application (installer) · 2019-05-24 | – | 3.3% | 2019-05-24 |
| CVE-2019-8062Adobe After Effects versions 16 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Adobe After Effects · CVSS 7.8 · 2019-08-14 | 7.8 | 3.2% | 2019-08-14 |
| CVE-2019-7931Adobe Premiere Pro CC versions 13.1.2 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Adobe Premiere Pro CC · 2019-08-14 | – | 3.1% | 2019-08-14 |
| CVE-2019-9634Go through 1.12 on Windows misuses certain LoadLibrary functionality, leading to DLL injection.Golang · Go · 2019-03-08 | – | 3.1% | 2019-03-08 |
| CVE-2020-24422Uncontrolled Search Path in Creative Cloud Desktop ApplicationAdobe · Creative Cloud (desktop component) · CVSS 7 · 2020-10-21 | 7.0 | 3.1% | 2020-10-21 |
| CVE-2019-7961Adobe Prelude CC versions 8.1 and earlier have an insecure library loading (dll hijacking) vulnerability. Successful exploitation could lead to arbitrary code execution.Adobe · Adobe Prelude CC · 2019-08-14 | – | 3.0% | 2019-08-14 |
| CVE-2022-0166Privilege escalation vulnerability in McAfee AgentMcAfee,LLC · McAfee Agent for Windows · CVSS 7.8 · 2022-01-19 | 7.8 | 2.9% | 2022-01-19 |
| CVE-2020-10515STARFACE UCC Client before 6.7.1.204 on WIndows allows binary planting to execute code with System rights, aka usd-2020-0006.Starface · Unified Communication & Collaboration Client · 2020-04-02 | – | 2.9% | 2020-04-02 |
| CVE-2017-3012Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL hijacking) vulnerability in the OCR plu…Adobe · Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.2007… · 2017-04-12 | – | 2.8% | 2017-04-12 |
| CVE-2018-7799A DLL hijacking vulnerability exists in Schneider Electric Software Update (SESU), all versions prior to V2.2.0, which could allow an attacker to execute arbitrary code on the tar…Schneider Electric SE · Schneider Electric Software Update (SESU), all versions prior to V2.2.0 · 2018-11-02 | – | 2.8% | 2018-11-02 |
| CVE-2022-38395HP Support Assistant uses HP Performance Tune-up as a diagnostic tool. HP Support Assistant uses Fusion to launch HP Performance Tune-up. It is possible for an attacker to exploit…HP Inc. · HP Support Assistant · CVSS 7.8 · 2022-11-18 | 7.8 | 2.8% | 2022-11-18 |
| CVE-2019-9546SolarWinds Orion Platform before 2018.4 Hotfix 2 allows privilege escalation through the RabbitMQ service.Solarwinds · Orion Platform · 2019-03-01 | – | 2.8% | 2019-03-01 |
| CVE-2020-9724Adobe Lightroom versions 9.2.0.10 and earlier have an insecure library loading vulnerability. Successful exploitation could lead to privilege escalation.Adobe · Adobe Lightroom · 2020-08-19 | – | 2.7% | 2020-08-19 |
| CVE-2024-24916DLL-HiJackingcheckpoint · Check Point SmartConsole · CVSS 6.5 · 2025-06-19 | 6.5 | 2.7% | 2025-06-19 |
| CVE-2020-15663If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges. Although the Mozi…Mozilla · Firefox · 2020-10-01 | – | 2.7% | 2020-10-01 |
| CVE-2021-28594Creative Cloud Desktop installer Uncontrolled Search Path element could lead to arbitrary code executionAdobe · Prelude · CVSS 7.8 · 2021-08-24 | 7.8 | 2.7% | 2021-08-24 |
| CVE-2021-21010Uncontrolled search path element in Adobe InCopyAdobe · InCopy · CVSS 7 · 2021-01-13 | 7.0 | 2.6% | 2021-01-13 |
| CVE-2021-21008Uncontrolled Search Path Element vulnerability in Animate 21.0Adobe · Animate · CVSS 7 · 2021-01-13 | 7.0 | 2.5% | 2021-01-13 |
| CVE-2017-7966A DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC v2.1.0 allows a remote attacker to execute arbitrary code on the targeted system.…Schneider Electric SE · SoMachine HVAC Programming Software · 2017-06-07 | – | 2.4% | 2017-06-07 |
| CVE-2017-12717An Uncontrolled Search Path Element issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A maliciously crafted dll file placed earlier in the search path m…Advantech · Advantech WebAccess · 2017-08-30 | – | 2.4% | 2017-08-30 |
| CVE-2019-7653The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "py…Rdflib Project · Rdflib · 2019-02-09 | – | 2.3% | 2019-02-09 |
| CVE-2021-28570Adobe After Effects uncontrolled search path element vulnerability could lead to remote code executionAdobe · After Effects · CVSS 8.3 · 2021-06-28 | 8.3 | 2.3% | 2021-06-28 |
| CVE-2022-23202Adobe Creative Cloud Desktop Uncontrolled Search Path Element Arbitrary code executionAdobe · Creative Cloud (desktop component) · CVSS 7 · 2022-02-16 | 7.0 | 2.2% | 2022-02-16 |
| CVE-2021-21007Uncontrolled search path element vulnerability in Illustrator 25.0 could lead to arbitrary code executionAdobe · Illustrator · CVSS 7 · 2021-01-13 | 7.0 | 2.2% | 2021-01-13 |
| CVE-2019-12280PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element.Pc-Doctor · Toolbox · 2019-06-25 | – | 2.2% | 2019-06-25 |
| CVE-2021-28636Adobe Acrobat Reader Unquoted Search Path VulnerabilityAdobe · Acrobat Reader · CVSS 7.3 · 2021-08-20 | 7.3 | 2.2% | 2021-08-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.