Weaknesses of type CWE-669

88 results

Transferência incorreta de recursos entre contextos de segurança

Ocorre quando um recurso (arquivo, memória, conexão, token) é transferido entre contextos de segurança distintos (ex: kernel para userspace, sandbox para sistema) sem validação ou isolamento adequado. O recurso herda ou perde restrições de segurança durante a transferência, permitindo que código em um contexto acesse ou controle dados que deveria estar vedado.

Example

Um driver passa um ponteiro de memória do kernel diretamente para uma aplicação userspace sem copiar os dados ou validar o acesso. A aplicação then modifica a memória kernel, causando privilege escalation. Outro caso: um sandbox retorna um file descriptor aberto para um arquivo fora da restrição, permitindo que o processo escape das limitações impostas.

How to mitigate

Implemente validação explícita ao transferir recursos entre contextos: copie dados em vez de compartilhar referências diretas, valide permissões no contexto de destino, e use abstrações que isolem os contextos (ex: system calls com verificação, APIs seguras). Documente claramente a posse e as restrições de cada recurso em cada esfera.

CVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 98.1%KEVCVE-2026-25253HIGHOpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket conneEPSS 32.4%CVE-2025-63387MEDIUMDify 1.9.1 and 1.17.0 exposes the /console/api/system-features endpoint to unauthenticated HTTP GET requests that return system feature and EPSS 18.7%CVE-2020-15257MEDIUMcontainerd-shim API Exposed to Host Network ContainersEPSS 3.1%CVE-2025-67895CRITICALApache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2EPSS 1.2%CVE-2024-37891MEDIUMProxy-Authorization request header isn't stripped during cross-origin redirects in urllib3EPSS 1.1%CVE-2021-22806—A CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could cause data exfiltration and unauthorized access when EPSS 1.0%CVE-2022-30236HIGHA CWE-669: Incorrect Resource Transfer Between Spheres vulnerability exists that could allow unauthorized access when an attacker uses crossEPSS 0.8%CVE-2022-46173HIGHElrond go Processing: fallback search of SCRs when not found in the main cacheEPSS 0.8%CVE-2024-29018MEDIUMExternal DNS requests from 'internal' networks could lead to data exfiltrationEPSS 0.7%CVE-2023-22950MEDIUMAn issue was discovered in TigerGraph Enterprise Free Edition 3.x. Data loading jobs in gsql_server, created by any user with designer permiEPSS 0.7%CVE-2021-34574MEDIUMPassword policy evasion in products of MB connect line and HelmholzEPSS 0.7%CVE-2022-35916MEDIUMCross chain utilities for Arbitrum L2 see EOA calls as cross chain callsEPSS 0.6%CVE-2025-34158HIGHPlex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/aEPSS 0.6%CVE-2026-48847LOWRoundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session pEPSS 0.6%CVE-2023-31114CRITICALAn issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can EPSS 0.6%CVE-2025-62646MEDIUMThe Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of converEPSS 0.5%CVE-2026-71194MEDIUMIn OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests. When tEPSS 0.5%CVE-2023-41894MEDIUMLocal-only webhooks externally accessible via SniTun in Home Assistant CoreEPSS 0.5%CVE-2022-39225MEDIUMParse Server subject to Incorrect Resource Transfer Between SpheresEPSS 0.5%