CWE-426

712 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.

Critical 22High 588Medium 87Low 14Not scored 1

CVEs per yearBy the year they were published

CVE-2012-1854
Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications…
Product not named
ExploitedHigh7.8
CVE-2022-23748
mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under what conditions. In…
Audinate Dante Application Library for Windows
ExploitedHigh7.8
CVE-2022-22047
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh7.8

CVE-2026-119333
draw.io Desktop allows Windows executable search-path hijacking
jgraph · drawio-desktop
High7.8
CVE-2026-116243
pgAdmin 4: Utility binary path can point at a shared storage directory
pgadmin.org · pgAdmin 4
High7.7
CVE-2026-57203
Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
asterisk · asterisk
Medium6.9
CVE-2026-105477
A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance…
Veeam · Agent for Linux
High7.3
CVE-2026-113461
mk-oracle: Local privilege escalation via insecure Oracle Home library loading
Checkmk GmbH · Checkmk
Medium5.2
CVE-2026-95182
An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening crafted executable…
Product not named
Critical10.0
CVE-2026-0315
GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
Palo Alto Networks · GlobalProtect App
Medium5.9
CVE-2026-103847
Dimension | Untrusted Search Path (CWE-426)
Adobe · Adobe Dimension
High8.6
CVE-2026-83509
Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.0
CVE-2026-83506
Servicing Stack Updates Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
High7.8