Weaknesses of type CWE-426

322 results

Caminho de busca não confiável

Ocorre quando a aplicação busca por bibliotecas, executáveis ou arquivos em diretórios cuja ordem ou conteúdo pode ser controlado por um atacante. Se um diretório não confiável vem antes de um diretório legítimo no PATH (ou em lógica de busca customizada), o atacante injeta um arquivo malicioso com o mesmo nome para ser carregado no lugar do original.

Example

Um software Windows busca 'config.dll' primeiro no diretório atual antes de procurar em System32. Um atacante coloca uma DLL maliciosa com esse nome na pasta de trabalho; quando o software executa, carrega a versão maliciosa e compromete a máquina.

How to mitigate

Especifique sempre caminhos absolutos completos ao carregar bibliotecas e executáveis, evitando buscas dinâmicas em PATH. Em Unix/Linux, remova ou coloque o diretório atual (.) ao final do PATH, nunca no início; no Windows, configure DLL search order e use mecanismos como SetDllDirectory para restringir onde as DLLs são procuradas.

CVE-2025-29903MEDIUMIn JetBrains Runtime before 21.0.6b872.80 arbitrary dynamic library execution due to insecure macOS flags was possibleEPSS 0.2%CVE-2026-0662HIGHUntrusted Search Path Vulnerability when opening max FilesEPSS 0.2%CVE-2025-4769HIGHCBEWIN Anytxt Searcher ATService.exe uncontrolled search pathEPSS 0.2%CVE-2025-26624MEDIUMLocal Privilege Escalation in Rufus 4.6 and previous versionsEPSS 0.2%CVE-2026-92587MEDIUMn8n before 1.123.76 Sandbox Escape via Git Relative URLEPSS 0.2%CVE-2025-1353HIGHKong Insomnia profapi.dll untrusted search pathEPSS 0.2%CVE-2026-7309MEDIUMOpenshift-controller-manager: openshift container platform: information disclosure via environment variable injectionEPSS 0.2%CVE-2025-1804HIGHBlizzard Battle.Net profapi.dll uncontrolled search pathEPSS 0.2%CVE-2024-42439MEDIUMZoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search PathEPSS 0.2%CVE-2024-28060HIGHAn issue was discovered in Apiris Kafeo 6.4.4. It permits DLL hijacking, allowing a user to trigger the execution of arbitrary code every tiEPSS 0.2%CVE-2025-11940HIGHLibreWolf Installer setup.nsi uncontrolled search pathEPSS 0.2%CVE-2026-57919HIGHPBackupVSS.exe in Matrix42 Empirum before 25.5 and 26.x before 26.2 creates a named pipe (\\.\pipe\PBackupVSS) with a DACL that grants GENEREPSS 0.2%CVE-2024-48123HIGHAn issue in the USB Autorun function of HI-SCAN 6040i Hitrax HX-03-19-I allows attackers to execute arbitrary code via uploading a crafted sEPSS 0.2%CVE-2024-45207HIGHDLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searchEPSS 0.2%CVE-2025-2501HIGHAn untrusted search path vulnerability was reported in Lenovo PC Manager that could allow a local attacker to elevate privileges.EPSS 0.2%CVE-2025-5039HIGHPrivilege Ecalation due to Untrusted Search Path VulnerabilityEPSS 0.2%CVE-2024-25103MEDIUMDynamic Link Library (DLL) Hijacking Vulnerability in CDAC AppSamvid SoftwareEPSS 0.2%CVE-2026-14673LOWPostgreSQL amcheck does not clear untrusted search pathEPSS 0.2%CVE-2023-28143MEDIUMLocal Privilege EscalationEPSS 0.2%CVE-2026-27290HIGHAdobe Framemaker | Untrusted Search Path (CWE-426)EPSS 0.2%