CWE-284 (2634) CWE-79 (1848) CWE-416 (1298) CWE-862 (1184) CWE-89 (1097) CWE-22 (1024) CWE-125 (884) CWE-200 (847) CWE-306 (838) CWE-122 (831) CWE-20 (798) CWE-78 (711) CWE-918 (690) CWE-787 (686) CWE-863 (643) CWE-94 (642) CWE-74 (600) CWE-639 (543) CWE-400 (531) CWE-119 (503) CWE-269 (501) CWE-502 (471) CWE-770 (441) CWE-287 (432) CWE-121 (408) CWE-77 (373) CWE-190 (370) CWE-362 (323) CWE-352 (281) CWE-285 (243)

CWE-427

71 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-55013 high 7.1 0.0046 2026-08-20 Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to per
CVE-2026-18718 high 7.1 0.0017 2026-08-03 Ghidra contains an arbitrary code execution vulnerability in the Swift demangler analyzer that allow
CVE-2024-36333 high 7.0 0.0012 2026-05-15 A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privileg
CVE-2026-4134 high 7.0 0.0011 2026-04-15 During an internal security assessment, a potential vulnerability was discovered in Lenovo Software
CVE-2026-34488 high 7.0 0.0014 2026-04-23 IP Setting Software contains an issue with the DLL search path, which may lead to insecurely loading
CVE-2026-25852 medium 6.7 0.0009 2026-04-29 Local privilege escalation due to DLL hijacking vulnerability. The following products are affected:
CVE-2026-21770 medium 6.5 0.0016 2026-07-17 HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a DLL hijacking vulnerability which coul
CVE-2026-6421 medium 6.4 0.0015 2026-04-17 A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown
CVE-2026-15515 medium 6.4 0.0016 2026-07-13 A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301. This issue affects
CVE-2026-18605 medium 6.4 0.0016 2026-08-03 A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10. Affected is an unknown funct
CVE-2026-47274 medium 6.3 0.0014 2026-05-27 pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.9.0, m
CVE-2026-0294 medium 6.0 0.0017 2026-08-13 A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Wind
CVE-2026-5271 medium 5.6 0.0018 2026-04-01 pymanager included the current working directory in sys.path meaning modules could be shadowed by mo
CVE-2026-55015 medium 5.5 0.0098 2026-08-20 Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny servic
CVE-2026-1636 medium 5.4 0.0013 2026-04-15 A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain co
CVE-2026-66344 medium 5.4 0.0017 2026-08-05 NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Uncontrolled Search Pa
CVE-2026-12003 medium 5.3 0.0014 2026-06-16 To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), t
CVE-2024-47091 medium 5.2 0.0012 2026-05-13 Privilege escalation in the mk_mysql agent plugin on Windows in Checkmk <2.4.0p29, <2.3.0p47, and 2.
CVE-2020-3153 — &mdash; 0.2831 &mdash; Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths KEV
CVE-2020-3433 — &mdash; 0.1005 &mdash; Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows KEV
CVE-2026-110936 — &mdash; 0.0097 &mdash; Siemens Software Center contains an uncontrolled search path element vulnerability that could allow KEV