Weaknesses of type CWE-427

921 results

Caminho de busca ou elemento não controlado

A aplicação procura por bibliotecas, configurações ou outros recursos em diretórios sem validar adequadamente quais caminhos ela está usando, permitindo que um atacante injete uma versão maliciosa em um local que será encontrado primeiro. Isso acontece porque a ordem ou composição do caminho de busca não é explicitamente controlada.

Example

Um programa Java com classpath que inclui o diretório atual (.) antes de caminhos do sistema; um atacante coloca uma classe maliciosa no diretório de trabalho e ela é carregada em vez da legítima. Ou um script que procura por um arquivo de configuração em múltiplas pastas sem especificar o caminho absoluto, sendo enganado por um arquivo plantado em /tmp.

How to mitigate

Use caminhos absolutos explícitos em vez de relativos; remova diretórios inseguros (como o atual) do caminho de busca; valide a origem e integridade de recursos carregados (checksums, assinaturas); implemente listas de permitidos para diretórios confiáveis.

CVE-2020-6654HIGHDLL HijackingEPSS 0.4%CVE-2024-30376HIGHFamatech Advanced IP Scanner Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.4%CVE-2022-46330HIGHSquirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop applications. InstaEPSS 0.4%CVE-2021-1237HIGHCisco AnyConnect Secure Mobility Client for Windows DLL Injection VulnerabilityEPSS 0.4%CVE-2025-10939LOWOrg.keycloak/keycloak-quarkus-server: unable to restrict access to the admin consoleEPSS 0.4%CVE-2022-4956HIGHCaphyon Advanced Installer WinSxS DLL uncontrolled search pathEPSS 0.4%CVE-2017-11158—Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attEPSS 0.4%CVE-2025-22458HIGHDLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to EPSS 0.4%CVE-2022-44939HIGHEfs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component TextShaping.dll. This vuEPSS 0.4%CVE-2023-26266HIGHIn AFL++ 4.05c, the CmpLog component uses the current working directory to resolve and execute unprefixed fuzzing targets, allowing code exeEPSS 0.4%CVE-2023-30237HIGHCyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the component Dashboard.exe.EPSS 0.4%CVE-2023-27362HIGH3CX Uncontrolled Search Path Local Privilege Escalation VulnerabilityEPSS 0.4%CVE-2025-34109HIGHPanda Security PSEvents.exe Insecure DLL Loading Privilege EscalationEPSS 0.4%CVE-2024-1595HIGHDelta Electronics CNCSoft-B DOPSoft Uncontrolled Search Path ElementEPSS 0.4%CVE-2022-41141HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the EPSS 0.4%CVE-2025-69599CRITICALRayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable.EPSS 0.4%CVE-2019-1794MEDIUMCisco Directory Connector Search Order Hijacking VulnerabilityEPSS 0.4%CVE-2022-23410—AXIS IP Utility before 4.18.0 allows for remote code execution and local privilege escalation by the means of DLL hijacking. IPUtility.exe wEPSS 0.4%CVE-2026-0776HIGHDiscord Client Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.4%CVE-2025-56383HIGHNotepad++ v8.8.3 has a DLL hijacking vulnerability, which can replace the original DLL file to execute malicious code. NOTE: this is disputeEPSS 0.4%