Weaknesses of type CWE-426

351 results

Caminho de busca não confiável

Ocorre quando a aplicação busca por bibliotecas, executáveis ou arquivos em diretórios cuja ordem ou conteúdo pode ser controlado por um atacante. Se um diretório não confiável vem antes de um diretório legítimo no PATH (ou em lógica de busca customizada), o atacante injeta um arquivo malicioso com o mesmo nome para ser carregado no lugar do original.

Example

Um software Windows busca 'config.dll' primeiro no diretório atual antes de procurar em System32. Um atacante coloca uma DLL maliciosa com esse nome na pasta de trabalho; quando o software executa, carrega a versão maliciosa e compromete a máquina.

How to mitigate

Especifique sempre caminhos absolutos completos ao carregar bibliotecas e executáveis, evitando buscas dinâmicas em PATH. Em Unix/Linux, remova ou coloque o diretório atual (.) ao final do PATH, nunca no início; no Windows, configure DLL search order e use mecanismos como SetDllDirectory para restringir onde as DLLs são procuradas.

CVE-2020-9290HIGHA untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitableEPSS 0.9%CVE-2026-63093HIGHCursor for Windows 3.2.16 RCE via Malicious git.exe in WorkspaceEPSS 0.8%CVE-2024-20693HIGHWindows Kernel Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-3734MEDIUMRedis on Windows dbghelp.dll uncontrolled search pathEPSS 0.8%CVE-2024-35260HIGHMicrosoft Dataverse Remote Code Execution VulnerabilityEPSS 0.8%CVE-2023-41766HIGHWindows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2023-36422HIGHMicrosoft Windows Defender Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2021-21055MEDIUMAdobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information DisclosureEPSS 0.8%CVE-2026-108398HIGH.NET Framework Security Feature Bypass VulnerabilityEPSS 0.8%CVE-2026-55769CRITICALCloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`EPSS 0.8%CVE-2024-43616HIGHMicrosoft Office Remote Code Execution VulnerabilityEPSS 0.8%CVE-2024-23304HIGHCybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performinEPSS 0.8%CVE-2026-16674HIGHIBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server LibertyEPSS 0.7%CVE-2023-36898HIGHTablet Windows User Interface Application Core Remote Code Execution VulnerabilityEPSS 0.7%CVE-2024-3220LOWDefault mimetype known files writeable on WindowsEPSS 0.7%CVE-2024-6473HIGHDLL Hijacking in Yandex BrowserEPSS 0.7%CVE-2018-7365MEDIUMAll versions up to ZXCLOUD iRAI V5.01.05 of the ZTE uSmartView product are impacted by untrusted search path vulnerability, which may allow EPSS 0.7%CVE-2025-21399HIGHMicrosoft Edge (Chromium-based) Update Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2026-74872CRITICALopenssl_encrypt before 1.4.0 Arbitrary Code Execution via WhirlpoolEPSS 0.7%CVE-2023-35343HIGHWindows Geolocation Service Remote Code Execution VulnerabilityEPSS 0.7%