Falhas do tipo CWE-427

842 resultados
CVE-2026-2492HIGHTensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2021-0169MEDIUMUncontrolled Search Path Element in software for Intel(R) PROSet/Wireless Wi-Fi in Windows 10 and 11 may allow a privileged user to potentiaEPSS 0.2%CVE-2025-9267HIGHIn Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs fromEPSS 0.2%CVE-2022-1098HIGHDelta Electronics DIAEnergie Uncontrolledly Search Path ElementEPSS 0.2%CVE-2022-0025MEDIUMCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2025-23358HIGHNVIDIA NVApp for Windows contains a vulnerability in the installer, where a local attacker can cause a search path element issue. A successfEPSS 0.2%CVE-2022-28792MEDIUMDLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch addEPSS 0.2%CVE-2024-39708HIGHAn issue was discovered in the Agent in Delinea Privilege Manager (formerly Thycotic Privilege Manager) before 12.0.1096 on Windows. SometimEPSS 0.2%CVE-2023-25147MEDIUMAn issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypaEPSS 0.2%CVE-2025-53000HIGHnbconvert has an uncontrolled search path that leads to unauthorized code execution on WindowsEPSS 0.2%CVE-2024-7325HIGHIObit Driver Booster BPL VCL120.BPL uncontrolled search pathEPSS 0.2%CVE-2022-24426HIGHDell Command | Update, Dell Update, and Alienware Update version 4.4.0 contains a Local Privilege Escalation Vulnerability in the Advanced DEPSS 0.2%CVE-2022-43440HIGHPrivilege escalation via manipulated unixcat executableEPSS 0.2%CVE-2026-4962HIGHUltraVNC Service version.dll uncontrolled search pathEPSS 0.2%CVE-2022-0015HIGHCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2024-9498HIGHUncontrolled search path can lead to DLL hijacking in USBXpress SDK installerEPSS 0.2%CVE-2021-44199DLL hijacking could lead to denial of serviceEPSS 0.2%CVE-2026-4158HIGHKeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2026-33156HIGHDLL Sideloading in ScreenToGifEPSS 0.2%CVE-2023-25005HIGHA maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL EPSS 0.2%