CWE-426 Untrusted Search Path
baseThe product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (1305)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-23748US | high7.8OT critical | KEV | ||
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In these scenarios, a m… | ||||
| CVE-2022-22047US | high7.2OT critical | KEV | ||
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | ||||
| CVE-2012-1854US | medium6.9OT critical | KEV | ||
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Mic… | ||||
| CVE-2023-38408US | critical9.8 | Exploit | ||
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-con… | ||||
| CVE-2015-0096US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Serv… | ||||
| CVE-2021-46419US | critical9.1 | Exploit | ||
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. | ||||
| CVE-2016-0041US | high7.8 | Exploit | ||
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold and 1511, and Internet… | ||||
| CVE-2000-0854US | high10.0OT high | Exploit | ||
When a Microsoft Office 2000 document is launched, the directory of that document is first used to locate DLL's such as riched20.dll and msi.dll, which could allow an attacker to e… | ||||
| CVE-2011-3360US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Wireshark 1.4.x before 1.4.9 and 1.6.x before 1.6.2 allows local users to gain privileges via a Trojan horse Lua script in an unspecified dir… | ||||
| CVE-2010-3138US | high9.3 | Exploit | ||
Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the cu… | ||||
| CVE-2012-0016US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan hors… | ||||
| CVE-2010-3139US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Microsoft Windows Progman Group Converter (grpconv.exe) allows local users, and possibly remote attackers, to execute arbitrary code and cond… | ||||
| CVE-2010-3131US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Windows… | ||||
| CVE-2010-3967US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Microsoft Windows Movie Maker (WMM) 2.6 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as dem… | ||||
| CVE-2010-3147US | high9.3 | Exploit | ||
Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windo… | ||||
| CVE-2010-3143US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Microsoft Windows Contacts allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via… | ||||
| CVE-2013-3248US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonst… | ||||
| CVE-2010-3152US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execu… | ||||
| CVE-2010-3142US | high9.3 | Exploit | ||
Untrusted search path vulnerability in Microsoft Office PowerPoint 2007 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attac… | ||||
| CVE-2021-27928US | high7.2 | Exploit | ||
A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; an… | ||||
03
attack patterns (1)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan