Weaknesses of type CWE-427

897 results

Caminho de busca ou elemento não controlado

A aplicação procura por bibliotecas, configurações ou outros recursos em diretórios sem validar adequadamente quais caminhos ela está usando, permitindo que um atacante injete uma versão maliciosa em um local que será encontrado primeiro. Isso acontece porque a ordem ou composição do caminho de busca não é explicitamente controlada.

Example

Um programa Java com classpath que inclui o diretório atual (.) antes de caminhos do sistema; um atacante coloca uma classe maliciosa no diretório de trabalho e ela é carregada em vez da legítima. Ou um script que procura por um arquivo de configuração em múltiplas pastas sem especificar o caminho absoluto, sendo enganado por um arquivo plantado em /tmp.

How to mitigate

Use caminhos absolutos explícitos em vez de relativos; remova diretórios inseguros (como o atual) do caminho de busca; valide a origem e integridade de recursos carregados (checksums, assinaturas); implemente listas de permitidos para diretórios confiáveis.

CVE-2026-54672HIGHelectron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`EPSS 0.2%CVE-2022-34396HIGH Dell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged autEPSS 0.2%CVE-2024-47006MEDIUMUncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may aEPSS 0.2%CVE-2024-22167HIGHSanDisk PrivateAccess DLL Hijacking VulnerabilityEPSS 0.2%CVE-2022-32498MEDIUMDell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit thEPSS 0.2%CVE-2023-28745MEDIUMUncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enabEPSS 0.2%CVE-2026-5271MEDIUMPossible to hijack modules in current working directoryEPSS 0.2%CVE-2024-22346HIGHIBM i privilege escalationEPSS 0.2%CVE-2025-4769HIGHCBEWIN Anytxt Searcher ATService.exe uncontrolled search pathEPSS 0.2%CVE-2026-21427HIGHThe installers for multiple products provided by PIONEER CORPORATION contain an issue with the DLL search path, which may lead to insecurelyEPSS 0.2%CVE-2024-13976HIGHCommvault 11.20.0 - 11.36.0 Windows Maintenance Installer DLL InjectionEPSS 0.2%CVE-2026-5674HIGHPipewire: pipewire: sandbox escape and arbitrary code execution via malicious library loadingEPSS 0.2%CVE-2025-64994MEDIUMPrivilege Escalation via Uncontrolled Search Path in 1E-Nomad-SetWorkRate instructionEPSS 0.2%CVE-2025-0041HIGHUncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged userEPSS 0.2%CVE-2024-21814MEDIUMUncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentiEPSS 0.2%CVE-2025-26624MEDIUMLocal Privilege Escalation in Rufus 4.6 and previous versionsEPSS 0.2%CVE-2024-21862MEDIUMUncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated uEPSS 0.2%CVE-2024-21837MEDIUMUncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user EPSS 0.2%CVE-2026-30896HIGHThe installer for Qsee Client versions 1.0.1 and prior insecurely load Dynamic Link Libraries (DLLs). When a user is directed to place some EPSS 0.2%CVE-2026-25656HIGHA vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The EPSS 0.2%