Vulnerabilities (CVE)

Filtered by CWE-427
Total 1143 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-29015 1 Intel 2 Oneapi Base Toolkit, Vtune Profiler 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28953 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28952 2 Intel, Microsoft 3 Integrated Performance Primitives, Oneapi Base Toolkit, Windows 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28950 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28887 1 Intel 2 Integrated Performance Primitives, Oneapi Base Toolkit 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28881 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28876 1 Intel 2 Mpi Library, Oneapi Hpc Toolkit 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28172 1 Intel 2 Oneapi Hpc Toolkit, Trace Analyzer And Collector 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-28131 2026-06-17 N/A 7.8 HIGH
EasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer, which may lead to loading an executable file resides in the same folder where the extracted file is placed. If this vulnerability is exploited, arbitrary code may be executed with the privilege of the running program. Note that the developer was unreachable, therefore, users should consider stop using EasyRange Ver 1.41.
CVE-2024-28099 1 Keyence 1 Vt Studio 2026-06-17 N/A 7.8 HIGH
VT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privileges of the running application.
CVE-2024-28046 1 Intel 1 Graphics Performance Analyzers 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-26027 1 Intel 1 Simics Package Manager 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-26017 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-25050 1 Ibm 2 I, Rational Developer For I 2026-06-17 N/A 8.4 HIGH
IBM i 7.2, 7.3, 7.4, 7.5 and IBM Rational Development Studio for i 7.2, 7.3, 7.4, 7.5 networking and compiler infrastructure could allow a local user to gain elevated privileges due to an unqualified library call. A malicious actor could cause user-controlled code to run with administrator privileges. IBM X-Force ID: 283242.
CVE-2024-24977 1 Intel 1 License Manager For Flexim 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-24916 2 Checkpoint, Microsoft 2 Smartconsole, Windows 2026-06-17 N/A 6.5 MEDIUM
Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution with the installer's privileges (admin).
CVE-2024-24852 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-23940 2 Microsoft, Trendmicro 6 Windows, Air Support, Antivirus \+ Security and 3 more 2026-06-17 N/A 7.8 HIGH
Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/proxying vulnerability, which if exploited could allow an attacker to impersonate and modify a library to execute code on the system and ultimately escalate privileges on an affected system.
CVE-2024-23909 1 Intel 1 Field Programmable Gate Array Software Development Kit For Opencl 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-23907 1 Intel 3 High Level Synthesis Compiler, Oneapi Dpc\+\+\/c\+\+ Compiler, Quartus Prime 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.