Falhas do tipo CWE-427

922 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2023-4931MEDIUMUncontrolled search path element vulnerability in PleskEPSS 0.2%CVE-2022-28792MEDIUMDLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch addEPSS 0.2%CVE-2023-31361HIGHA DLL hijacking vulnerability in AMD Integrated Management Technology (AIM-T) Manageability Service could allow an attacker to achieve priviEPSS 0.2%CVE-2023-48677HIGHLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (WindoEPSS 0.2%CVE-2020-25244HIGHA vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). The software insecurely loads libraries which makes it vulnEPSS 0.2%CVE-2021-3042HIGHCortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege EscalationEPSS 0.2%CVE-2021-3041HIGHCortex XDR Agent: Improper control of user-controlled file leads to local privilege escalationEPSS 0.2%CVE-2025-43553HIGHSubstance3D - Modeler | Uncontrolled Search Path Element (CWE-427)EPSS 0.2%CVE-2023-47113HIGHDLL Search Order Hijacking vulnerability in BleachBit for WindowsEPSS 0.2%CVE-2022-22736HIGHIf Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directoryEPSS 0.2%CVE-2022-0192HIGHA DLL search path vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow privilege escalation.EPSS 0.2%CVE-2022-30696—Local privilege escalation due to a DLL hijacking vulnerabilityEPSS 0.2%CVE-2022-22139HIGHUncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potentially enable escalatiEPSS 0.2%CVE-2021-3550HIGHA DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.500.5102, that could allow privilege escalation.EPSS 0.2%CVE-2023-22818HIGHMultiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows EPSS 0.2%CVE-2022-1098HIGHDelta Electronics DIAEnergie Uncontrolledly Search Path ElementEPSS 0.2%CVE-2025-11940HIGHLibreWolf Installer setup.nsi uncontrolled search pathEPSS 0.2%CVE-2022-0025MEDIUMCortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) VulnerabilityEPSS 0.2%CVE-2020-25502HIGHCybereason EDR version 19.1.282 and above, 19.2.182 and above, 20.1.343 and above, and 20.2.X and above has a DLL hijacking vulnerability, wEPSS 0.2%CVE-2023-39929MEDIUMUncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially EPSS 0.2%