CWE-427— Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.— MITRE CWE catalog
1,269 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-427page 21 of 26
- CVE-2025-35972MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for the Intel MPI Library before version 2021.16 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity att…
- CVE-2025-32038MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some FPGA Support Package for the Intel oneAPI DPC++C++ Compiler software before version 2025.0.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an a…
- CVE-2025-32001MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a hi…
- CVE-2025-31931MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for the Instrumentation and Tracing Technology API (ITT API) software before version 3.25.4 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticat…
- CVE-2025-31647MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Intel(R) Graphics Software before version 25.22.1502.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high…
- CVE-2025-31645MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some System Event Log Viewer Utility software for all versions within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a h…
- CVE-2025-30506MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high…
- CVE-2025-30182MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated use…
- CVE-2025-25059MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated us…
- CVE-2025-24842MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a high comple…
- CVE-2025-24491MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.1465 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authen…
- CVE-2025-20065MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined wi…
- CVE-2025-20050MEDIUMCVSS 6.7EG 6.72025-11-11
Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a hi…
- CVE-2025-27717MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access
- CVE-2025-26404MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-24923MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-22838MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-21093MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20627MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20092MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20048MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20017MEDIUMCVSS 6.7EG 6.72025-08-12
Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-1729MEDIUMCVSS 6.7EG 6.72025-07-17
A DLL hijacking vulnerability was reported in TrackPoint Quick Menu software that, under certain conditions, could allow a local attacker to escalate privileges.
- CVE-2025-49158MEDIUMCVSS 6.7EG 6.72025-06-17
An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-…
- CVE-2025-21099MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) Graphics software may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20108MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20079MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20043MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2025-20041MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version 32.0.101.6325/32.0.101.6252 may allow an authenticated user to potentially enable escalation of privi…
- CVE-2025-20015MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-47800MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) Graphics Driver software may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-47795MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-46895MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) Arc™ & Iris(R) Xe graphics software before version 32.0.101.6083/32.0.101.5736 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-39833MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) QAT software before version 2.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-31073MEDIUMCVSS 6.7EG 6.72025-05-13
Uncontrolled search path for some Intel(R) oneAPI Level Zero software may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-47006MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-42492MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R) Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2024-42405MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some Intel(R) Quartus(R) Prime Software before version 23.1.1 Patch 1.01std may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-39813MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-39372MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for the Intel(R) XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-39365MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for the FPGA Support Package for the Intel(R) oneAPI DPC++/C++ Compiler software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-39284MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-36291MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some Intel(R) Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-36283MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for the Intel(R) Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-36280MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some Intel(R) High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-32938MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some Intel(R) MPI Library for Windows software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-29223MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path for some Intel(R) QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-24852MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path in some Intel(R) Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21830MEDIUMCVSS 6.7EG 6.72025-02-12
Uncontrolled search path in some Intel(R) VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-53977MEDIUMCVSS 6.7EG 6.72025-02-11
A vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example setup script contained in affected applications allows a specific executable file to be loaded from the current working d…
Map vulnerabilities like CWE-427 to your infrastructure
EchelonGraph correlates every CVE — across CWE-427 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →