CWE-428

CVEs per yearBy the year they were published

1. 20151
2. 20162
3. 201712
4. 201818
5. 201915
6. 202025
7. 202118
8. 202243
9. 202334
10. 202427
11. 202551
12. 2026210

Newest CVEs

• CVE-2026-82155

  Dell OS Recovery tool versions, prior to 2.4.4, contain a use of Untrusted Search Path vulnerability. An unauthenticated attacker with local access could…

  Dell · OS Recovery tool

  High7.8
• CVE-2026-97860

  YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system…

  Yamaha Corporation · YMS-VPN8

  High8.4
• CVE-2026-15358

  Path Traversal Vulnerability

  Zohocorp · ManageEngine OpManager

  High7.5
• CVE-2026-81469

  Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local…

  Dell · Inventory Collector Client

  High7.8
• CVE-2026-57223

  Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation

  OISF · suricata

  High7.0
• CVE-2026-77827

  Maono Link local privilege escalation

  Maono · Maono Link

  High8.4
• CVE-2026-66839

  NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an Unquoted Search Path or Element vulnerability (CWE-428). An authenticated…

  Integrated Systems Technologies, Inc. · NetKids iMark

  High8.4
• CVE-2026-18755

  GV-ASManager DLL hijacking vulnerability

  GeoVision Inc. · GV-ASManager

  High7.3
• CVE-2026-9128

  Studio 5000 Logix Designer® – Multiple Vulnerabilities

  Rockwell Automation · Studio 5000 Logix Designer

  High7.3
• CVE-2026-8864

  HP Fan Control App – Potential Escalation of Privilege

  HP Inc. · HP Fan Control App

  High7.3

Vendors it comes up for most

1. Dell7
2. Wondershare7
3. Acer5
4. Intel Corporation5
5. Iobit5
6. SAP SE5
7. Weird-Solutions5
8. Lenovo Group Ltd.4
9. Netgate4
10. Realtek4