Weaknesses of type CWE-693

961 results

Falha no Mecanismo de Proteção

É uma fraqueza genérica que abrange falhas em controles de segurança implementados para proteger o software—como validação, autenticação, criptografia ou controle de acesso—que não funcionam corretamente ou podem ser contornados. Quando esses mecanismos falham, o software fica exposto a ataques que deveriam ser prevenidos.

Example

Um sistema implementa CORS para restringir requisições cross-origin, mas a configuração está errada (aceita qualquer origem), permitindo que um atacante roube dados sensíveis via JavaScript malicioso executado em outro site. Ou um login exige senha forte, mas o algoritmo de hashing usado é fraco (MD5), permitindo força bruta rápida.

How to mitigate

Valide e teste rigorosamente cada mecanismo de proteção (autenticação, autorização, validação de entrada, criptografia) em cenários de ataque reais. Não confie em defaults de bibliotecas—revise configurações de segurança, use bibliotecas criptográficas consolidadas, implemente rate limiting, e mantenha logs e alertas para detectar tentativas de contorno.

CVE-2026-55304MEDIUMIn addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to localEPSS 0.1%CVE-2026-28650HIGHIn setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic error in the code. This could lead to locaEPSS 0.1%CVE-2026-28599HIGHIn addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This coulEPSS 0.1%CVE-2026-28655HIGHIn multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This coulEPSS 0.1%CVE-2026-58678HIGHIn Bootloader, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-56970HIGHIn multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of priviEPSS 0.1%CVE-2026-55359HIGHIn multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilEPSS 0.1%CVE-2026-28658HIGHIn findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the code. This could lead to local escalation EPSS 0.1%CVE-2026-58766HIGHIn multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to locEPSS 0.1%CVE-2026-28639HIGHIn rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local esEPSS 0.1%CVE-2026-28583HIGHIn validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds write due to a logical error in the code. ThisEPSS 0.1%CVE-2026-0065HIGHIn areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a possible unintended way to launch activities in EPSS 0.1%CVE-2026-0084HIGHIn multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This coEPSS 0.1%CVE-2026-28612HIGHIn resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection attacks due to a logic error in the code. EPSS 0.1%CVE-2026-28634HIGHIn handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error iEPSS 0.1%CVE-2026-59002LOWIn handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physiEPSS 0.1%CVE-2026-28642HIGHIn executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead EPSS 0.1%CVE-2026-28594HIGHIn multiple locations, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilegeEPSS 0.1%CVE-2026-28668HIGHIn LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalatioEPSS 0.1%CVE-2026-49881HIGHIn serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could leEPSS 0.1%