Falhas do tipo CWE-427
842 resultadosCVE-2025-30506MEDIUMUncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalEPSS 0.1%CVE-2025-62628HIGHUnsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentialEPSS 0.1%CVE-2026-26099HIGHUncontrolled Search Path Element in Owl opdsEPSS 0.1%CVE-2026-26097HIGHUncontrolled Search Path Element in Owl opdsEPSS 0.1%CVE-2026-26098HIGHUncontrolled Search Path Element in Owl opdsEPSS 0.1%CVE-2026-11879HIGHArbitrary code execution in MobaXterm Personal Edition (Portable)EPSS 0.1%CVE-2026-11967HIGHArbitrary code execution in MobaXterm Personal Edition (Portable)EPSS 0.1%CVE-2026-21661HIGHAC2000 Uncontrolled Search Path ElementEPSS 0.1%CVE-2026-32323HIGHMullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installerEPSS 0.1%CVE-2026-44609HIGHLocal privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before EPSS 0.1%CVE-2026-11958HIGHLocal privilege escalation in ANSSI’s DFIR-ORCEPSS 0.1%CVE-2025-20065MEDIUMUncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allowEPSS 0.1%CVE-2025-25059MEDIUMUncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User ApplicatEPSS 0.1%CVE-2025-30182MEDIUMUncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User ApplicatiEPSS 0.1%CVE-2025-24491MEDIUMUncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: UseEPSS 0.1%CVE-2025-9164HIGHMultiple DLL Search Order Hijacking Vulnerabilities in Docker Desktop Installer for WindowsEPSS 0.1%CVE-2024-22451MEDIUMDell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentiaEPSS 0.1%CVE-2024-22447MEDIUMDell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially eEPSS 0.1%CVE-2025-13670MEDIUMHigh Level Synthesis Compiler Security AdvisoryEPSS 0.1%CVE-2025-13669MEDIUMHigh Level Synthesis Compiler Security AdvisoryEPSS 0.1%