cve.bz

CWE-426: Untrusted Search Path, page 6

Filter

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

What the weakness is: CWE-426 at MITRE. OWASP Top 10: A08:2025 Software or Data Integrity Failures

Related attack patterns (CAPEC): 1
  • CAPEC-38 Leveraging/Manipulating Configuration File Search Paths Likelihood: High · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-426, as MITRE names them. Credits.

Ask an AI about CWE-426

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-426: Untrusted Search Path and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/426.html and https://cve.bz/cve/cwe/426?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-22190EPSS 0.3%

    GitPython is a python library used to interact with Git repositories. There is an incomplete fix for CVE-2023-40590. On Windows, GitPython uses an untrusted search path if it uses a shell to run `git`, as well as when it runs `bash.exe` to…

  2. 7.8CVE-2024-21325EPSS 1.2%

    Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability

  3. 7.8CVE-2023-48670EPSS 0.2%

    Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execu…

  4. 8.8CVE-2023-43586EPSS 1.0%

    Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.

  5. 7.3CVE-2023-36003EPSS 2.8%

    XAML Diagnostics Elevation of Privilege Vulnerability

  6. 7.5CVE-2023-26031EPSS 2.1%

    Relative library resolution in linux container-executor binary in Apache Hadoop 3.3.1-3.3.4 on Linux allows local user to gain root privileges. If the YARN cluster is accepting work from remote (authenticated) users, this MAY permit remote…

  7. 5.5CVE-2023-39202EPSS 0.2%

    Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access.

  8. 7.8CVE-2023-41840EPSS 0.3%

    A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path.

  9. 7.8CVE-2023-36422EPSS 0.8%

    Microsoft Windows Defender Elevation of Privilege Vulnerability

  10. 7.8CVE-2023-36393EPSS 1.0%

    Windows User Interface Application Core Remote Code Execution Vulnerability

  11. 7.8CVE-2021-26738EPSS 0.2%

    Zscaler Client Connector for macOS prior to 3.7 had an unquoted search path vulnerability via the PATH variable. A local adversary may be able to execute code with root privileges.

  12. 7.8CVE-2023-41766EPSS 0.8%

    Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability

  13. 7.2CVE-2023-36780EPSS 2.7%

    Skype for Business Remote Code Execution Vulnerability

  14. 8.0CVE-2023-36778EPSS 2.3%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  15. 6.7CVE-2023-39201EPSS 0.2%

    Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access.

  16. 7.8CVE-2023-4736EPSS 0.5%

    Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

  17. 7.8CVE-2023-40590EPSS 0.5%

    GitPython is a python library used to interact with Git repositories. When resolving a program, Python/Windows look for the current working directory, and after that the PATH environment. GitPython defaults to use the `git` command, if a u…

  18. 7.5CVE-2023-41105EPSS 2.6%

    An issue was discovered in Python 3.11 through 3.11.4. If a path containing '\0' bytes is passed to os.path.normpath(), the path will be truncated unexpectedly at the first '\0' byte. There are plausible cases in which an application would…

  19. 7.8CVE-2022-43456EPSS 0.2%

    Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

  20. 4.7CVE-2023-29299EPSS 0.4%

    Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Untrusted Search Path vulnerability that could lead to Application denial-of-service. An attacker could leverage this vulnerability …

  21. 5.5CVE-2023-39212EPSS 0.2%

    Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.

  22. 7.8CVE-2023-36898EPSS 0.7%

    Tablet Windows User Interface Application Core Remote Code Execution Vulnerability

  23. 7.8CVE-2023-36540EPSS 0.3%

    Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

  24. 7.8CVE-2023-36538EPSS 0.2%

    Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

  25. 7.8CVE-2023-36536EPSS 0.2%

    Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

  26. 7.8CVE-2023-35343EPSS 0.7%

    Windows Geolocation Service Remote Code Execution Vulnerability

  27. 7.8CVE-2023-34119EPSS 0.2%

    Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

  28. 7.8CVE-2023-34145EPSS 0.3%

    An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain …

  29. 7.8CVE-2023-34144EPSS 0.3%

    An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain …

  30. 9.8CVE-2023-30330ExploitEPSS 5.9%

    SoftExpert (SE) Excellence Suite 2.x versions before 2.1.3 is vulnerable to Local File Inclusion in the function /se/v42300/generic/gn_defaultframe/2.0/defaultframe_filter.php.

  31. 7.5CVE-2023-29790EPSS 0.6%

    kodbox 1.2.x through 1.3.7 has a Sensitive Information Leakage issue.

  32. 7.0CVE-2023-28143EPSS 0.2%

    Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only on older macOSX (macOS 10.15 and older) versions. Attackers may exploit incorrec…

  33. 7.8CVE-2023-27771EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd Creative Centerr v.1.0.8 allows a remote attacker to execute arbitrary commands via the wondershareCC_setup_full10819.exe file.

  34. 7.8CVE-2023-27770EPSS 0.5%

    An issue found in Wondershare Technology Co.,Ltd Edraw-max v.12.0.4 allows a remote attacker to execute arbitrary commands via the edraw-max_setup_full5371.exe file.

  35. 7.8CVE-2023-27769EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd PDF Reader v.1.0.1 allows a remote attacker to execute arbitrary commands via the pdfreader_setup_full13143.exe file.

  36. 7.8CVE-2023-27768EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd PDFelement v9.1.1 allows a remote attacker to execute arbitrary commands via the pdfelement-pro_setup_full5239.exe file.

  37. 7.8CVE-2023-27767EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd Dr.Fone v.12.4.9 allows a remote attacker to execute arbitrary commands via the drfone_setup_full3360.exe file.

  38. 7.8CVE-2023-27766EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd Anireel 1.5.4 allows a remote attacker to execute arbitrary commands via the anireel_setup_full9589.exe file.

  39. 7.8CVE-2023-27765EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd Recoverit v.10.6.3 allows a remote attacker to execute arbitrary commands via the recoverit_setup_full4134.exe file.

  40. 7.8CVE-2023-27764EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd Repairit v.3.5.4 allows a remote attacker to execute arbitrary commands via the repairit_setup_full5913.exe file.

  41. 7.8CVE-2023-27763EPSS 0.4%

    An issue found in Wondershare Technology Co.,Ltd MobileTrans v.4.0.2 allows a remote attacker to execute arbitrary commands via the mobiletrans_setup_full5793.exe file.

  42. 7.8CVE-2023-27762EPSS 0.4%

    An issue found in Wondershare Technology Co., Ltd DemoCreator v.6.0.0 allows a remote attacker to execute arbitrary commands via the democreator_setup_full7743.exe file.

  43. 7.8CVE-2023-27761EPSS 0.4%

    An issue found in Wondershare Technology Co., Ltd UniConverter v.14.0.0 allows a remote attacker to execute arbitrary commands via the uniconverter14_64bit_setup_full14204.exe file.

  44. 7.8CVE-2023-27760EPSS 0.4%

    An issue found in Wondershare Technology Co, Ltd Filmora v.12.0.9 allows a remote attacker to execute arbitrary commands via the filmora_setup_full846.exe.

  45. 7.8CVE-2023-27759EPSS 0.4%

    An issue found in Wondershare Technology Co, Ltd Edrawmind v.10.0.6 allows a remote attacker to executea arbitrary commands via the WindowsCodescs.dll file.

  46. 7.8CVE-2023-26358EPSS 0.4%

    Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, access unauthorized data files, or modify configuration in unexpected ways. If the a…

  47. 6.5CVE-2023-26038EPSS 0.5%

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerabilit…

  48. 9.8CVE-2023-26036EPSS 0.9%

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerabilit…

  49. 4.2CVE-2023-23920EPSS 0.5%

    An untrusted search path vulnerability exists in Node.js. <19.6.1, <18.14.1, <16.19.1, and <14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges.

  50. 7.8CVE-2023-22368EPSS 0.2%

    Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.