Vulnerabilities (CVE)

Filtered by CWE-427
Total 1247 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-32646 1 Intel 1 Virtual Raid On Cpu 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-32618 1 Intel 1 Oneapi 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-32272 1 Intel 1 Nuc Pro Software Suite 2026-06-17 N/A 7.9 HIGH
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2023-31543 1 Pipreqs Project 1 Pipreqs 2026-06-17 N/A 9.8 CRITICAL
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
CVE-2023-31361 2026-06-17 N/A 7.3 HIGH
A DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability Service could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
CVE-2023-31358 1 Amd 1 Aim-t Manageability Api 2026-06-17 N/A 7.3 HIGH
A DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2023-31348 1 Amd 1 Uprof 2026-06-17 N/A 7.3 HIGH
A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2023-31210 1 Checkmk 1 Checkmk 2026-06-17 N/A 8.8 HIGH
Usage of user controlled LD_LIBRARY_PATH in agent in Checkmk 2.2.0p10 up to 2.2.0p16 allows malicious Checkmk site user to escalate rights via injection of malicious libraries
CVE-2023-31197 1 Intel 1 Trace Analyzer And Collector 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-31027 2 Microsoft, Nvidia 2 Windows, Virtual Gpu 2026-06-17 N/A 8.2 HIGH
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.
CVE-2023-31016 2 Microsoft, Nvidia 2 Windows, Virtual Gpu 2026-06-17 N/A 7.3 HIGH
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
CVE-2023-2355 1 Acronis 1 Snap Deploy 2026-06-17 N/A 7.8 HIGH
Local privilege escalation due to a DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before build 3900.
CVE-2023-29504 1 Intel 1 Realsense D400 Series Dynamic Calibration Tool 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path element in some Intel(R) RealSense(TM) Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-29445 1 Ptc 3 Kepware Kepserverex, Thingworx Industrial Connectivity, Thingworx Kepware Server 2026-06-17 N/A 7.8 HIGH
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM.
CVE-2023-29444 1 Ptc 3 Kepware Kepserverex, Thingworx Industrial Connectivity, Thingworx Kepware Server 2026-06-17 N/A 6.3 MEDIUM
An uncontrolled search path element vulnerability (DLL hijacking) has been discovered that could allow a locally authenticated adversary to escalate privileges to SYSTEM. Alternatively, they could host a trojanized version of the software and trick victims into downloading and installing their malicious version to gain initial access and code execution.
CVE-2023-29187 1 Sap 1 Sapsetup 2026-06-17 N/A 6.7 MEDIUM
A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the attackers control.
CVE-2023-29161 1 Intel 1 One Boot Flash Update 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-29151 1 Intel 1 Platform Service Record Software Development Kit 2026-06-17 N/A 6.7 MEDIUM
Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2023-29069 1 Autodesk 1 Desktop Connector 2026-06-17 N/A 7.8 HIGH
A maliciously crafted DLL file can be forced to install onto a non-default location, and attacker can overwrite parts of the product with malicious DLLs. These files may then have elevated privileges leading to a Privilege Escalation vulnerability.
CVE-2023-29012 1 Git For Windows Project 1 Git For Windows 2026-06-17 N/A 7.2 HIGH
Git for Windows is the Windows port of Git. Prior to version 2.40.1, any user of Git CMD who starts the command in an untrusted directory is impacted by an Uncontrolles Search Path Element vulnerability. Maliciously-placed `doskey.exe` would be executed silently upon running Git CMD. The problem has been patched in Git for Windows v2.40.1. As a workaround, avoid using Git CMD or, if using Git CMD, avoid starting it in an untrusted directory.