Search Vulnerabilities

Illustrator | Untrusted Search Path (CWE-426)

GDI Remote Code Execution Vulnerability

UltraVNC Windows Service cryptbase.dll uncontrolled search path

TimescaleDB uses untrusted search path during extension upgrade

eAI Technologies｜ERP - DLL Hijacking

Notepad++ has an Untrusted Search Path

Total VPN win-service.exe unquoted search path

Flos Freeware Notepad2 Msimg32.dll uncontrolled search path

Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path

Windows Storage Elevation of Privilege Vulnerability

Artifex MuPDF win_main.c get_system_dpi uncontrolled search path

Untrusted Search Path in SumatraPDF Reader (explorer.exe on Windows)

Tanium addressed an improper input validation vulnerability in Tanium Appliance.

IBM App Connect Enterprise Certified Container Information Disclosure

Untrusted Search Path Vulnerability when opening max Files

Untrusted search path vulnerability in Embedded Solutions Framework

OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking

Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access

pnpm: Binary ZIP extraction allows arbitrary file write via path traversal (Zip Slip)

SumatraPDF has an Untrusted Search Path in sumatrapdf/src/AppTools.cpp