CWE-427— Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.— MITRE CWE catalog
1,269 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-427page 23 of 26
- CVE-2024-21831MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21818MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21814MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21788MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21777MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21774MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2024-21772MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-45743MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-45320MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-43751MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before versions 31.0.101.3790/31.0.101.2114 may allow an authenticated user to potentially enable escalation…
- CVE-2023-41961MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-40155MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-39929MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-35192MEDIUMCVSS 6.7EG 6.72024-05-16
Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-39254MEDIUMCVSS 6.7EG 6.72024-03-01
Dell Update Package (DUP), Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin.
- CVE-2023-49114MEDIUMCVSS 6.7EG 6.72024-02-26
A DLL hijacking vulnerability was identified in the Qognify VMS Client Viewer version 7.1 or higher, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL, if some specifi…
- CVE-2023-39932MEDIUMCVSS 6.7EG 6.72024-02-14
Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of privilege via local access.
- CVE-2023-28745MEDIUMCVSS 6.7EG 6.72024-02-14
Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-25779MEDIUMCVSS 6.7EG 6.72024-02-14
Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-34430MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-34350MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-33874MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of pr…
- CVE-2023-32660MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-29504MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path element in some Intel(R) RealSense(TM) Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-29161MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-28740MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-28388MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-27513MEDIUMCVSS 6.7EG 6.72023-11-14
Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-4936MEDIUMCVSS 6.7EG 6.72023-10-11
It is possible to sideload a compromised DLL during the installation at elevated privilege.
- CVE-2023-34355MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escal…
- CVE-2023-29151MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-28823MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-28405MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-25944MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-24016MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-23577MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-22841MEDIUMCVSS 6.7EG 6.72023-08-11
Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated u…
- CVE-2022-43456MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-25864MEDIUMCVSS 6.7EG 6.72023-08-11
Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-28080MEDIUMCVSS 6.7EG 6.72023-05-30
PowerPath for Windows, versions 7.0, 7.1 & 7.2 contains DLL Hijacking Vulnerabilities. A regular user (non-admin) can exploit these issues to potentially escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM…
- CVE-2023-31197MEDIUMCVSS 6.7EG 6.72023-05-12
Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-27386MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path in some Intel(R) Pathfinder for RISC-V software may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2023-22355MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-43474MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-41998MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-41982MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-41693MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-41628MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-38101MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CVE-2022-34848MEDIUMCVSS 6.7EG 6.72023-05-10
Uncontrolled search path for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Map vulnerabilities like CWE-427 to your infrastructure
EchelonGraph correlates every CVE — across CWE-427 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →