Falhas do tipo CWE-427

922 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2025-9201HIGHA potential DLL hijacking vulnerability was discovered in Lenovo Browser during an internal security assessment that could allow a local useEPSS 0.2%CVE-2023-28823MEDIUMUncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticatEPSS 0.2%CVE-2022-41628MEDIUMUncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1EPSS 0.2%CVE-2021-33064MEDIUMUncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentialEPSS 0.2%CVE-2023-23577MEDIUMUncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticaEPSS 0.2%CVE-2022-41982MEDIUMUncontrolled search path element in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentEPSS 0.2%CVE-2026-13133HIGHA vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative EPSS 0.2%CVE-2025-34424HIGHMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIDP.DLLEPSS 0.2%CVE-2026-9169HIGHLUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on WindowsEPSS 0.2%CVE-2025-34423HIGHMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIAU.DLLEPSS 0.2%CVE-2025-34419HIGHMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAISM.DLLEPSS 0.2%CVE-2024-33672HIGHAn issue was discovered in Veritas NetBackup before 10.4. The Multi-Threaded Agent used in NetBackup can be leveraged to perform arbitrary fEPSS 0.2%CVE-2025-40827HIGHA vulnerability has been identified in Siemens Software Center (All versions < V3.5), Solid Edge SE2025 (All versions < V225.0 Update 10). TEPSS 0.2%CVE-2025-2272HIGHPrivilege Escalation and Arbitrary code execution in F1E EndpointEPSS 0.2%CVE-2025-34418HIGHMailEnable < 10.54 DLL Hijacking via Unsafe Loading of MEAIMF.DLLEPSS 0.2%CVE-2024-2637HIGHInsecure Loading of Code in B&R ProductsEPSS 0.2%CVE-2025-52541HIGHA DLL hijacking vulnerability in Vivado could allow a local attacker to achieve privilege escalation, potentially resulting in arbitrary codEPSS 0.2%CVE-2025-61161HIGHDLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search paEPSS 0.2%CVE-2026-28760HIGHThe installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to plaEPSS 0.2%CVE-2025-7676MEDIUMDLL hijacking of all PE32 executables on Windows 11 for ARM CPUsEPSS 0.2%