CWE-426 vulnerabilities

Yandex Telemost for Desktop before 2.7.0 has a DLL Hijacking Vulnerability because an untrusted search path is used.

An untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6

CVE-2024-3220 is a low-severity vulnerability in the Python CPython standard library module mimetypes affecting Windows platforms. The issue arises because mimetypes uses default file locations that are writable by users on Windows, allowing creation of invalid files that can cause a MemoryError during Python startup or incorrect file type interpretation. This occurs due to Linux/macOS default paths being used on Windows where they are user-writable. The vulnerability is fixed in CPython versions 3.11.18, 3.12.16, 3.13.18, 3.14.9, 3.15.1, and 3.16.0. A workaround is to call mimetypes.init() with an empty list on Windows to avoid using the default writable locations.

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

Microsoft Office Remote Code Execution Vulnerability

An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.

CVE-2024-43616 is a high-severity vulnerability in Microsoft 365 Apps for Enterprise involving an untrusted search path issue that could lead to remote code execution. This vulnerability allows an attacker to execute arbitrary code with high impact on confidentiality, integrity, and availability. An official fix is available from Microsoft, and the vendor manages remediation for this cloud-hosted service.

CVE-2024-43576 is a high-severity vulnerability in Microsoft 365 Apps for Enterprise involving an untrusted search path that could allow remote code execution. The flaw is identified as CWE-426 and affects specific versions of the product. Microsoft has issued an official fix for this vulnerability. No known exploits are currently reported in the wild.