Fallos del tipo CWE-427

896 resultados

Busca descontrolada em caminho ou elemento

Ocorre quando uma aplicação procura por um arquivo, biblioteca ou recurso em um caminho sem validação adequada, permitindo que um atacante injete ou substitua o alvo da busca. Um adversário pode colocar um arquivo malicioso em um diretório que será encontrado primeiro, ou manipular a ordem de busca, fazendo o programa executar código não autorizado.

Ejemplo

Um programa busca por uma DLL em C:\Windows\System32 e depois no diretório atual. Se o atacante colocar uma DLL maliciosa no diretório de trabalho, ela será carregada em vez da legítima. Ou um script shell procura por um binário em PATH sem caminho absoluto — um atacante cria uma versão maliciosa em um diretório que vem antes na busca.

Cómo mitigar

Use caminhos absolutos e canonicalizados em vez de busca por caminho; valide cada etapa da resolução antes de usar o recurso; configure permissões restritivas em diretórios de busca e remova diretórios modificáveis do PATH. Em tempo de execução, carregue apenas recursos de locais pré-definidos e confiáveis.

CVE-2024-21772MEDIUMUncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalEPSS 0.2%CVE-2023-41091MEDIUMUncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enableEPSS 0.2%CVE-2023-27513MEDIUMUncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticEPSS 0.2%CVE-2023-36493MEDIUMUncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escEPSS 0.2%CVE-2023-35769MEDIUMUncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalaEPSS 0.2%CVE-2025-33229HIGHNVIDIA Nsight Visual Studio for Windows contains a vulnerability in Nsight Monitor where an attacker can execute arbitrary code with the samEPSS 0.2%CVE-2023-35060MEDIUMUncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to poteEPSS 0.2%CVE-2023-28740MEDIUMUncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated uEPSS 0.2%CVE-2023-28388MEDIUMUncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to EPSS 0.2%CVE-2023-32618MEDIUMUncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated uEPSS 0.2%CVE-2023-24591MEDIUMUncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentiEPSS 0.2%CVE-2023-38566MEDIUMUncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalatiEPSS 0.2%CVE-2023-29161MEDIUMUncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatiEPSS 0.2%CVE-2024-21788MEDIUMUncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalatioEPSS 0.2%CVE-2023-28759HIGHAn issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL priorEPSS 0.2%CVE-2022-36840MEDIUMDLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code.EPSS 0.2%CVE-2023-39932MEDIUMUncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enablEPSS 0.2%CVE-2026-38972HIGHNotepad3 through 6.25.822.1 contains a DLL search-order hijacking vulnerability in the About-dialog code path in src/Notepad3.c. The applicaEPSS 0.2%CVE-2025-13051CRITICALWindows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privilegesEPSS 0.2%CVE-2025-41670HIGHUntrusted Search PathEPSS 0.2%