Fallos del tipo CWE-441

231 resultados

Intermediário não intencional ('Deputado confuso')

Ocorre quando um componente com privilégios é induzido a executar ações em nome de um atacante, sem validar adequadamente se a solicitação veio realmente de quem deveria autorizar. O código confia em identificadores fracos ou contexto incompleto, permitindo que um terceiro abuse da autoridade do componente para acessar recursos ou realizar operações que não conseguiria fazer diretamente.

Ejemplo

Um serviço web interno que processa solicitações de eliminação de arquivos verifica se o usuário está autenticado, mas não valida se a solicitação veio do próprio usuário ou de um terceiro (ex: injeção de referência cruzada ou CSRF). Um atacante induz o navegador da vítima a fazer um pedido de deleção usando os cookies da vítima, e o serviço executa a ação porque reconhece a autenticação, não a origem legítima.

Cómo mitigar

Implemente validação robusta da origem e integridade da solicitação: use tokens CSRF únicos e vinculados à sessão, valide o header Referer/Origin, e aplique autenticação step-up para operações sensíveis. Nunca confie apenas em cookies ou sessão para operações de risco; exija confirmação explícita do usuário ou re-autenticação.

CVE-2026-47122MEDIUMSparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injectionEPSS 0.1%CVE-2025-48646HIGHIn executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalationEPSS 0.1%CVE-2026-45520HIGHIn onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escEPSS 0.1%CVE-2026-49922HIGHIn queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This coulEPSS 0.1%CVE-2026-58884HIGHIn startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to lEPSS 0.1%CVE-2026-59000HIGHIn multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-58885HIGHIn multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-58965HIGHIn handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to locaEPSS 0.1%CVE-2026-0021HIGHIn hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. ThisEPSS 0.1%CVE-2026-56986HIGHIn multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no adEPSS 0.1%CVE-2025-26454HIGHIn validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confusedEPSS 0.1%CVE-2026-56985HIGHIn multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-59028HIGHIn resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to lEPSS 0.1%CVE-2026-58944HIGHIn moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confusedEPSS 0.1%CVE-2026-58957HIGHIn resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. ThEPSS 0.1%CVE-2026-49931HIGHIn onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could leadEPSS 0.1%CVE-2026-58943HIGHIn run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalatEPSS 0.1%CVE-2026-55271HIGHIn forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This cEPSS 0.1%CVE-2026-58970HIGHIn deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local eEPSS 0.1%CVE-2026-55289HIGHIn multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could leadEPSS 0.1%