Weaknesses of type CWE-427

922 results

Caminho de busca ou elemento não controlado

A aplicação procura por bibliotecas, configurações ou outros recursos em diretórios sem validar adequadamente quais caminhos ela está usando, permitindo que um atacante injete uma versão maliciosa em um local que será encontrado primeiro. Isso acontece porque a ordem ou composição do caminho de busca não é explicitamente controlada.

Example

Um programa Java com classpath que inclui o diretório atual (.) antes de caminhos do sistema; um atacante coloca uma classe maliciosa no diretório de trabalho e ela é carregada em vez da legítima. Ou um script que procura por um arquivo de configuração em múltiplas pastas sem especificar o caminho absoluto, sendo enganado por um arquivo plantado em /tmp.

How to mitigate

Use caminhos absolutos explícitos em vez de relativos; remova diretórios inseguros (como o atual) do caminho de busca; valide a origem e integridade de recursos carregados (checksums, assinaturas); implemente listas de permitidos para diretórios confiáveis.

CVE-2025-13665MEDIUMQuartus Prime Standard Security AdvisoryEPSS 0.1%CVE-2025-62628HIGHUnsafe OpenSSL initialization within some AMD optional tools may allow a local user-privileged attacker to inject a malicious DLL, potentialEPSS 0.1%CVE-2026-11967HIGHArbitrary code execution in MobaXterm Personal Edition (Portable)EPSS 0.1%CVE-2026-21661HIGHAC2000 Uncontrolled Search Path ElementEPSS 0.1%CVE-2026-11879HIGHArbitrary code execution in MobaXterm Personal Edition (Portable)EPSS 0.1%CVE-2026-32323HIGHMullvad VPN for macOS: Local Privilege Escalation via unverified bundle path in installerEPSS 0.1%CVE-2026-44609HIGHLocal privilege escalation due to EXE hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before EPSS 0.1%CVE-2026-28712MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) beforEPSS 0.1%CVE-2026-28711MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 17 (Windows) beforEPSS 0.1%CVE-2026-25264HIGHUncontrolled Search Path Element in Qualcomm Software CenterEPSS 0.1%CVE-2026-11958HIGHLocal privilege escalation in ANSSI’s DFIR-ORCEPSS 0.1%CVE-2026-27774MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before builEPSS 0.1%CVE-2026-28728MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before builEPSS 0.1%CVE-2024-22451MEDIUMDell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentiaEPSS 0.1%CVE-2024-22447MEDIUMDell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially eEPSS 0.1%CVE-2026-104809HIGHMitel MiVoice Office 400 Shared Object Hijacking Leading to Arbitrary Code ExecutionEPSS 0.1%CVE-2026-123510LOWVikunja before 2.7.1 Plugin and Log Directories Not Anchored to RootpathEPSS 0.1%CVE-2025-14575LOWUncontrolled Search Path Element in Qt Network OpenSSL TLS backend allows rogue CA certificate loadingEPSS 0.1%CVE-2026-25852MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis DeviceLock DLP (Windows) before EPSS 0.1%CVE-2026-20772MEDIUMUncontrolled search path for some Intel(R) Connectivity Performance Suite software installers before version 50.25.1121.193 within Ring 3: UEPSS 0.1%