Weaknesses of type CWE-427

897 results

Caminho de busca ou elemento não controlado

A aplicação procura por bibliotecas, configurações ou outros recursos em diretórios sem validar adequadamente quais caminhos ela está usando, permitindo que um atacante injete uma versão maliciosa em um local que será encontrado primeiro. Isso acontece porque a ordem ou composição do caminho de busca não é explicitamente controlada.

Example

Um programa Java com classpath que inclui o diretório atual (.) antes de caminhos do sistema; um atacante coloca uma classe maliciosa no diretório de trabalho e ela é carregada em vez da legítima. Ou um script que procura por um arquivo de configuração em múltiplas pastas sem especificar o caminho absoluto, sendo enganado por um arquivo plantado em /tmp.

How to mitigate

Use caminhos absolutos explícitos em vez de relativos; remova diretórios inseguros (como o atual) do caminho de busca; valide a origem e integridade de recursos carregados (checksums, assinaturas); implemente listas de permitidos para diretórios confiáveis.

CVE-2026-4158HIGHKeePassXC OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2024-10389MEDIUMPath Traversal in SafearchiveEPSS 0.2%CVE-2023-6132HIGHAVEVA Edge products Uncontrolled Search Path ElementEPSS 0.2%CVE-2024-7886HIGHScooter Software Beyond Compare 7zxa.dll uncontrolled search pathEPSS 0.2%CVE-2025-34396HIGHMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAINFY.DLLEPSS 0.2%CVE-2023-28407MEDIUMUncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalaEPSS 0.2%CVE-2025-4272HIGHMechrevo Control Console GCUService csCAPI.dll uncontrolled search pathEPSS 0.2%CVE-2024-21788MEDIUMUncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalatioEPSS 0.2%CVE-2023-35060MEDIUMUncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to poteEPSS 0.2%CVE-2023-29161MEDIUMUncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatiEPSS 0.2%CVE-2023-35769MEDIUMUncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalaEPSS 0.2%CVE-2023-24591MEDIUMUncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentiEPSS 0.2%CVE-2026-8637HIGHA potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that could allow a local authentEPSS 0.2%CVE-2024-21772MEDIUMUncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-32618MEDIUMUncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated uEPSS 0.2%CVE-2026-3775HIGHFoxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2023-28740MEDIUMUncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated uEPSS 0.2%CVE-2023-38566MEDIUMUncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalatiEPSS 0.2%CVE-2023-36493MEDIUMUncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escEPSS 0.2%CVE-2025-33229HIGHNVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the samEPSS 0.2%