CWE-426— Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.— MITRE CWE catalog
732 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-426page 1 of 15
- CVE-2008-3357HIGHCVSS v2 7.2EG 7.22008-08-05
Untrusted search path vulnerability in ingvalidpw in Ingres 2.6, Ingres 2006 release 1 (aka 9.0.4), and Ingres 2006 release 2 (aka 9.1.0) on Linux and HP-UX allows local users to gain privileges via a crafted shared library, related to a "…
- CVE-2008-5983MEDIUMCVSS v2 6.9EG 6.92009-01-28
Untrusted search path vulnerability in the PySys_SetArgv API function in Python 2.6 and earlier, and possibly later versions, prepends an empty string to sys.path when the argv[0] argument does not contain a path separator, which might all…
- CVE-2009-0314MEDIUMCVSS v2 6.9EG 6.92009-01-28
Untrusted search path vulnerability in the Python module in gedit allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function (CVE-2…
- CVE-2010-3159MEDIUMCVSS v2 6.9EG 6.92010-10-25
Untrusted search path vulnerability in Explzh 5.67 and earlier allows local users to gain privileges via a Trojan horse executable file in the current working directory.
- CVE-2010-3190HIGHCVSS 7.8EG 7.82010-08-31
Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Ser…
- CVE-2010-4831MEDIUMCVSS v2 6.9EG 6.92011-09-06
Untrusted search path vulnerability in gdk/win32/gdkinput-win32.c in GTK+ before 2.21.8 allows local users to gain privileges via a Trojan horse Wintab32.dll file in the current working directory.
- CVE-2010-4833HIGHCVSS v2 9.3EG 9.32011-09-06
Untrusted search path vulnerability in modules/engines/ms-windows/xp_theme.c in GTK+ before 2.24.0 allows local users to gain privileges via a Trojan horse uxtheme.dll file in the current working directory, a different vulnerability than C…
- CVE-2010-5250MEDIUMCVSS v2 6.9EG 6.92012-09-07
Untrusted search path vulnerability in the pthread_win32_process_attach_np function in pthreadGC2.dll in Pthreads-win32 2.8.0 allows local users to gain privileges via a Trojan horse quserex.dll file in the current working directory. NOTE…
- CVE-2011-2019HIGHCVSS v2 9.3EG 9.32011-12-14
Untrusted search path vulnerability in Microsoft Internet Explorer 9 on Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstr…
- CVE-2011-3640HIGHCVSS v2 7.1EG 7.12011-10-28
Untrusted search path vulnerability in Mozilla Network Security Services (NSS), as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level direct…
- CVE-2011-3691HIGHCVSS v2 9.3EG 9.32011-09-27
Untrusted search path vulnerability in Foxit Reader before 5.0.2.0718 allows local users to gain privileges via a Trojan horse dwmapi.dll, dwrite.dll, or msdrm.dll in the current working directory.
- CVE-2011-4125CRITICALCVSS 9.8EG 9.82021-10-27
A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root.
- CVE-2011-5158HIGHCVSS v2 9.3EG 9.32012-09-07
Multiple untrusted search path vulnerabilities in the DMTGUI2.EXE and DvInesLogFileViewer.Exe components in DATEV Grundpaket Basis CD23.20 allow local users to gain privileges via a Trojan horse (1) DVBSKNLANG101.dll or (2) DvZediTermSrvIn…
- CVE-2012-1854CRITICALCVSS 7.8EG 9.0⚠ KEV2012-07-10
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users…
- CVE-2012-2040HIGHCVSS v2 9.3EG 9.32012-06-09
Untrusted search path vulnerability in the installer in Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x…
- CVE-2013-2773HIGHCVSS 7.8EG 7.82020-01-14
Nitro PDF 8.5.0.26: A specially crafted DLL file can facilitate Arbitrary Code Execution
- CVE-2013-3494HIGHCVSS 7.8EG 7.82020-02-12
A Code Execution Vulnerability exists in UMPlayer 0.98 in wintab32.dll due to insufficient path restrictions when loading external libraries. which could let a malicious user execute arbitrary code.
- CVE-2013-3942HIGHCVSS 7.8EG 7.82020-02-11
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
- CVE-2014-0315MEDIUMCVSS v2 6.9EG 6.92014-04-08
Untrusted search path vulnerability in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT…
- CVE-2014-3860HIGHCVSS 7.8EG 7.82020-02-12
Xilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability
- CVE-2014-8358HIGHCVSS 7.8EG 7.82017-12-11
Huawei EC156, EC176, and EC177 USB Modem products with software before UTPS-V200R003B015D02SP07C1014 (23.015.02.07.1014) and before V200R003B015D02SP08C1014 (23.015.02.08.1014) use a weak ACL for the "Mobile Partner" directory, which allow…
- CVE-2015-0096HIGHCVSS v2 9.3EG 9.32015-03-11
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows loc…
- CVE-2015-0974HIGHCVSS 7.8EG 7.82017-08-28
Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying the 'Ucell Internet' directory to reference a malicious mms_dll_r.dll or mediaplayerdll.dll.
- CVE-2015-3887HIGHCVSS 7.8EG 7.82017-09-21
Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so library in the current working directory, which is referenced in the LD_PRELOAD path.
- CVE-2015-8264HIGHCVSS 7.8EG 7.82017-08-02
Untrusted search path vulnerability in F-Secure Online Scanner allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse DLL that is located in the same folder as F-SecureOnlineScanner.exe.
- CVE-2016-0014HIGHCVSS 7.8EG 7.82016-01-13
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users …
- CVE-2016-0016HIGHCVSS 7.8EG 7.82016-01-13
Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users …
- CVE-2016-0018HIGHCVSS 7.3EG 7.32016-01-13
Microsoft Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 R2, and Windows 10 Gold and 1511 mishandle DLL loading, which allows local users to gain privileges via a crafted application, aka "DLL Loading Remote Code Execution Vuln…
- CVE-2016-10009HIGHCVSS 7.3EG 7.52017-01-05
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
- CVE-2016-1014HIGHCVSS 7.3EG 7.82016-04-09
Untrusted search path vulnerability in Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows local users to gain privileges via a Trojan horse resource in a…
- CVE-2016-10837HIGHCVSS 7.5EG 7.52019-08-01
cPanel before 11.54.0.4 allows arbitrary code execution because of an unsafe @INC path (SEC-46).
- CVE-2016-1281HIGHCVSS 7.8EG 7.82017-01-23
Untrusted search path vulnerability in the installer for TrueCrypt 7.2 and 7.1a, VeraCrypt before 1.17-BETA, and possibly other products allows local users to execute arbitrary code with administrator privileges and conduct DLL hijacking a…
- CVE-2016-1417HIGHCVSS 8.8EG 8.82017-01-23
Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 allows remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tcapi.dll that is located in the same folder on a remote file share as a pcap…
- CVE-2016-4846HIGHCVSS 7.8EG 7.82017-04-21
Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2.
- CVE-2016-4900HIGHCVSS 7.8EG 7.82017-05-22
Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-4901HIGHCVSS 7.8EG 7.82017-05-22
Untrusted search path vulnerability in The installer of e-Tax Software all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-4902HIGHCVSS 7.8EG 7.82017-06-09
Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (…
- CVE-2016-5330HIGHCVSS 7.8EG 7.82016-08-08
Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fus…
- CVE-2016-6167HIGHCVSS 7.8EG 7.82017-01-30
Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll file in the current working directory.
- CVE-2016-6593HIGHCVSS 7.8EG 7.82020-01-08
A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code.
- CVE-2016-6803HIGHCVSS 7.8EG 7.82017-11-13
An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Windows. The PC must have previously been infected by a Trojan Horse application (or user) running with…
- CVE-2016-7085HIGHCVSS 7.8EG 7.82016-12-29
Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified di…
- CVE-2016-7300HIGHCVSS 7.8EG 7.82016-12-20
Untrusted search path vulnerability in Microsoft Auto Updater for Mac allows local users to gain privileges via a Trojan horse executable file, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability."
- CVE-2016-7804HIGHCVSS 7.8EG 7.82017-05-22
Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2016-7838HIGHCVSS 7.8EG 7.82017-06-09
Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
- CVE-2016-8746MEDIUMCVSS 5.9EG 5.92017-06-14
Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.
- CVE-2016-9274HIGHCVSS 7.8EG 7.82016-11-11
Untrusted search path vulnerability in Git 1.x for Windows allows local users to gain privileges via a Trojan horse git.exe file in the current working directory. NOTE: 2.x is unaffected.
- CVE-2017-10812HIGHCVSS 7.8EG 7.82017-08-29
Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-10820HIGHCVSS 7.8EG 7.82017-08-04
Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-10821HIGHCVSS 7.8EG 7.82017-08-18
Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September 30) Distributed on the website until 2017 May 17 allows an attacker to gain privileges via a Trojan…
Map vulnerabilities like CWE-426 to your infrastructure
EchelonGraph correlates every CVE — across CWE-426 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →