Falhas do tipo CWE-427

922 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2024-28099HIGHVT STUDIO Ver.8.32 and earlier contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As aEPSS 0.2%CVE-2024-9495HIGHUncontrolled search path can lead to DLL hijacking in CP210x VCP Windows installerEPSS 0.2%CVE-2026-56795HIGHDell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attackeEPSS 0.2%CVE-2024-28131HIGHEasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer, which may lead to lEPSS 0.2%CVE-2026-103845HIGHDimension | Uncontrolled Search Path Element (CWE-427)EPSS 0.2%CVE-2024-53588HIGHA DLL hijacking vulnerability in iTop VPN v16.0 allows attackers to execute arbitrary code via placing a crafted DLL file into the path \ProEPSS 0.2%CVE-2024-29734HIGHUncontrolled search path element issue exists in SonicDICOM Media Viewer 2.3.2 and earlier, which may lead to insecurely loading Dynamic LinEPSS 0.2%CVE-2024-33578HIGHA DLL hijack vulnerability was reported in Lenovo Leyun that could allow a local attacker to execute code with elevated privileges.EPSS 0.2%CVE-2024-21774MEDIUMUncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authentEPSS 0.2%CVE-2024-47006MEDIUMUncontrolled search path for the Intel(R) RealSense D400 Series Universal Windows Platform (UWP) Driver for Windows(R) 10 all versions may aEPSS 0.2%CVE-2024-42492MEDIUMUncontrolled search path element in some BIOS and System Firmware Update Package for Intel(R) Server M50FCP family before version R01.02.000EPSS 0.2%CVE-2024-12530HIGHInsecure Dynamic-Link Library (DLL) Load vulnerabilityEPSS 0.2%CVE-2026-54672HIGHelectron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`EPSS 0.2%CVE-2024-42405MEDIUMUncontrolled search path for some Intel(R) Quartus(R) Prime Software before version 23.1.1 Patch 1.01std may allow an authenticated user to EPSS 0.2%CVE-2024-22167HIGHSanDisk PrivateAccess DLL Hijacking VulnerabilityEPSS 0.2%CVE-2024-22346HIGHIBM i privilege escalationEPSS 0.2%CVE-2022-34396HIGH Dell OpenManage Server Administrator (OMSA) version 10.3.0.0 and earlier contains a DLL Injection Vulnerability. A local low privileged autEPSS 0.2%CVE-2024-47576LOWDLL Hijacking vulnerability in SAP Product Lifecycle CostingEPSS 0.2%CVE-2023-28745MEDIUMUncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enabEPSS 0.2%CVE-2023-25779MEDIUMUncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user EPSS 0.2%