CVE-2024-9496

HIGH Year: 2024
CVSS v3 Score
8.6
High
Weakness Type
CWE-427
View all →

Vulnerability Description

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.

Related Vulnerabilities

CVE-2020-13279

HIGH
CVSS:8.6(High)

Client side code execution in gitlab-vscode-extension v2.2.0 allows attacker to execute code on user system

CWE-4272020

CVE-2020-5145

HIGH
CVSS:8.6(High)

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target sy...

CWE-4272020

CVE-2021-28570

HIGH
CVSS:8.6(High)

Adobe After Effects version 18.1 (and earlier) is affected by an Uncontrolled Search Path element vulnerability. An unauthenticated attacker could exploit this to to plant custom binaries and execute ...

CWE-4272021

CVE-2024-9490

HIGH
CVSS:8.6(High)

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Silicon Labs (8-bit) IDE installer can lead to privilege escalation and arbitrary code execution when running the impacted insta...

CWE-4272024

CVE-2024-9491

HIGH
CVSS:8.6(High)

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Configuration Wizard 2 installer can lead to privilege escalation and arbitrary code execution when running the impacted install...

CWE-4272024

CVE-2024-9492

HIGH
CVSS:8.6(High)

DLL hijacking vulnerabilities, caused by an uncontrolled search path in Flash Programming Utility installer can lead to privilege escalation and arbitrary code execution when running the impacted inst...

CWE-4272024