Fallos del tipo CWE-250

399 resultados

Execução com privilégios desnecessários

É quando um programa ou processo roda com mais permissões do que precisa para executar suas funções normais. Se esse programa for comprometido, o atacante herda todos esses privilégios extras, ampliando drasticamente o dano possível. É o oposto do princípio do menor privilégio.

Ejemplo

Um daemon web que deveria apenas servir arquivos estáticos roda como root ao invés de um usuário específico sem privilégios. Se a aplicação web tiver uma vulnerabilidade de RCE, o invasor já está dentro com acesso total ao sistema, podendo alterar qualquer arquivo ou iniciar ataques laterais.

Cómo mitigar

Implemente o princípio do menor privilégio: crie contas de serviço dedicadas com apenas as permissões necessárias, use drop privileges em runtime quando possível, configure containers e VMs com usuários não-root, e revise regularmente quais recursos cada aplicação realmente precisa acessar.

CVE-2024-22017HIGHsetuid() does not affect libuv's internal io_uring operations if initialized before the call to setuid(). This allows the process to performEPSS 0.9%CVE-2018-10856MEDIUMIt has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This resulEPSS 0.9%CVE-2024-21003LOWVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions thEPSS 0.9%CVE-2026-72508CRITICALMulticloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)EPSS 0.8%CVE-2025-33224CRITICALNVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges. A successful exploiEPSS 0.8%CVE-2019-16767MEDIUMIn EzMaster before 5.2.11 docker containers were executed with advanced privileges by defaultEPSS 0.8%CVE-2022-32535MEDIUMWeb server runs as rootEPSS 0.8%CVE-2026-18982HIGHOdh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterrolesEPSS 0.8%CVE-2025-32445CRITICALUsers can gain privileged access to the host system and cluster with EventSource and Sensor CREPSS 0.8%CVE-2026-42833CRITICALMicrosoft Dynamics 365 On-Premises Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-17110HIGHIBM i is Affected By Multiple Vulnerabilities in SQLEPSS 0.7%CVE-2026-18669HIGHIBM i is Affected By A Privilege Escalation Vulnerability []EPSS 0.7%CVE-2026-27208CRITICALapi-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root ExecutionEPSS 0.7%CVE-2020-26278MEDIUMWeave Net Pods running in host PID namespace can be used to escalate other Kubernetes vulnerabilitiesEPSS 0.7%CVE-2018-1087HIGHkernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnerable to a flaw in theEPSS 0.7%CVE-2024-20478MEDIUMCisco Application Policy Infrastructure Controller App Privilege Escalation VulnerabilityEPSS 0.7%CVE-2024-28139HIGHPrivilege escalation through sudo misconfigurationEPSS 0.7%CVE-2025-42958CRITICALMissing Authentication check in SAP NetWeaverEPSS 0.7%CVE-2023-45592MEDIUMA CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the EPSS 0.7%CVE-2026-18608HIGHData-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wideEPSS 0.7%