Weaknesses of type CWE-693

829 results

Falha no Mecanismo de Proteção

É uma fraqueza genérica que abrange falhas em controles de segurança implementados para proteger o software—como validação, autenticação, criptografia ou controle de acesso—que não funcionam corretamente ou podem ser contornados. Quando esses mecanismos falham, o software fica exposto a ataques que deveriam ser prevenidos.

Example

Um sistema implementa CORS para restringir requisições cross-origin, mas a configuração está errada (aceita qualquer origem), permitindo que um atacante roube dados sensíveis via JavaScript malicioso executado em outro site. Ou um login exige senha forte, mas o algoritmo de hashing usado é fraco (MD5), permitindo força bruta rápida.

How to mitigate

Valide e teste rigorosamente cada mecanismo de proteção (autenticação, autorização, validação de entrada, criptografia) em cenários de ataque reais. Não confie em defaults de bibliotecas—revise configurações de segurança, use bibliotecas criptográficas consolidadas, implemente rate limiting, e mantenha logs e alertas para detectar tentativas de contorno.

CVE-2026-56979MEDIUMIn multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilEPSS 0.1%CVE-2026-0186MEDIUMIn ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalEPSS 0.1%CVE-2026-58755MEDIUMIn smmu_install_nested_ste of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead tEPSS 0.1%CVE-2026-56970HIGHIn multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of priviEPSS 0.1%CVE-2026-56973MEDIUMIn multiple locations, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of EPSS 0.1%CVE-2026-0187MEDIUMIn gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could leadEPSS 0.1%CVE-2026-55304MEDIUMIn addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to localEPSS 0.1%CVE-2026-28612HIGHIn resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. EPSS 0.1%CVE-2026-28583HIGHIn validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. ThisEPSS 0.1%CVE-2026-0084HIGHIn multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This coEPSS 0.1%CVE-2026-0065HIGHIn areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in EPSS 0.1%CVE-2026-28594HIGHIn multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilegeEPSS 0.1%CVE-2026-28650HIGHIn setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to locaEPSS 0.1%CVE-2026-28634HIGHIn handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error iEPSS 0.1%CVE-2026-57006MEDIUMIn acfw_ffa.c, there is a possible secret read due to a logic error in the code. This could lead to local information disclosure with SystemEPSS 0.1%CVE-2026-58678HIGHIn Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-28642HIGHIn executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead EPSS 0.1%CVE-2026-28655HIGHIn multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This coulEPSS 0.1%CVE-2026-28599HIGHIn addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This coulEPSS 0.1%CVE-2026-58726MEDIUMIn FsmReleaseKey of fsm.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of pEPSS 0.1%