Search Vulnerabilities

Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace

CAI Content Credentials | Untrusted Search Path (CWE-426)

Illustrator | Untrusted Search Path (CWE-426)

Animate | Untrusted Search Path (CWE-426)

Microsoft XML Security Feature Bypass Vulnerability

A vulnerability has been identified in COMOS V10.4.5 (All versions < V10.4.5.0.2), COMOS V10.6 (All versions < V10.6.1), Designcenter NX (All versi...

Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc

Untrusted Search Path

Notepad++: Privilege Escalation in the Installer via Uncontrolled Executable Search Path

RTK improperly trusts project-local filter configuration, allowing silent tampering of command output shown to LLM

OpenClaw < 2026.5.2 - Arbitrary Command Execution via Workspace-Derived Service PATH

OpenClaw < 2026.5.2 - Arbitrary Runtime Dependency Loading via STATE_DIRECTORY Environment Variable

OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath

OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable

Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol

OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override

Windows Narrator Braille Elevation of Privilege Vulnerability

Windows Storage Elevation of Privilege Vulnerability

Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS