Falhas do tipo CWE-114

28 resultados

Controle inadequado de processos

Uma aplicação permite que um atacante manipule ou assuma controle sobre processos do sistema (iniciar, parar, modificar parâmetros, redirecionar saída) sem validação adequada de permissões ou entrada. O risco é que o invasor execute código com privilégios elevados ou interrompa serviços críticos.

Exemplo

Um script de administração lê o nome de um processo a partir de parâmetro do usuário e o termina via sistema operacional sem validar o nome — um atacante passa o nome de um serviço crítico e consegue derrubá-lo, ou passa um comando shell que é interpretado junto ao nome do processo.

Como mitigar

Valide rigidamente qualquer entrada destinada ao controle de processos (whitelist de processos permitidos), use APIs seguras específicas do SO em vez de shell parsing, e aplique o princípio do menor privilégio — processos críticos devem rodar com permissões mínimas e sem capacidade de iniciar/parar outros.

CVE-2022-23748HIGHmDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under EPSS 8.3%KEVCVE-2020-11075HIGHShell Escape in Anchore EngineEPSS 1.8%CVE-2024-32004HIGHGit vulnerable to Remote Code Execution while cloning special-crafted local repositoriesEPSS 1.4%CVE-2024-56346CRITICALIBM AIX command executionEPSS 1.1%CVE-2019-8461—Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean imEPSS 1.1%CVE-2019-8458—Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLLEPSS 1.0%CVE-2024-56347CRITICALIBM AIX command executionEPSS 0.9%CVE-2021-25736MEDIUMWindows kube-proxy LoadBalancer contentionEPSS 0.9%CVE-2025-36250CRITICALAIX Code ExecutionEPSS 0.7%CVE-2026-92939CRITICALvm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngineEPSS 0.6%CVE-2020-11081MEDIUMosquery susceptible to DLL search order hijacking of zlib1.dllEPSS 0.6%CVE-2025-36251CRITICALAIX Command ExecutionEPSS 0.5%CVE-2025-0160HIGHIBM FlashSystem code executionEPSS 0.5%CVE-2026-29046CRITICALTinyWeb: HTTP Header Control Character Injection into CGI EnvironmentEPSS 0.4%CVE-2023-40299—Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by usingEPSS 0.4%CVE-2020-6014—Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load aEPSS 0.4%CVE-2020-8107HIGHProcess Control vulnerability in Bitdefender Antivirus PlusEPSS 0.3%CVE-2019-8453—Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can EPSS 0.3%CVE-2026-94347HIGHPowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70,EPSS 0.3%CVE-2024-25021HIGHIBM AIX command executionEPSS 0.3%