Falhas do tipo CWE-427

922 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2025-64995MEDIUMPrivilege Escalation via Process Hijacking in 1E-Exchange-NomadClientHealth-ConfigureGeneralSetting instructionEPSS 0.2%CVE-2026-28760HIGHThe installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs. If a user is directed to plaEPSS 0.2%CVE-2024-55543HIGHLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) beforEPSS 0.2%CVE-2024-28881MEDIUMUncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021.13 may allow an authenticated user to potenEPSS 0.2%CVE-2024-26017MEDIUMUncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially EPSS 0.2%CVE-2025-49158MEDIUMAn uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges oEPSS 0.2%CVE-2026-91093HIGHHP One Agent Software – Security UpdateEPSS 0.2%CVE-2025-14498HIGHTradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2025-14406HIGHSoda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation VulnerabilityEPSS 0.2%CVE-2024-55540MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) beforEPSS 0.2%CVE-2025-1223MEDIUMAn attacker can gain application privileges in order to perform limited modification and/or read arbitrary dataEPSS 0.2%CVE-2026-21408MEDIUMbeat-access for Windows version 3.0.3 and prior contains an issue with the DLL search path, which may lead to insecurely loading Dynamic LinEPSS 0.2%CVE-2025-55671HIGHUncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code mayEPSS 0.2%CVE-2024-49390HIGHLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before buiEPSS 0.2%CVE-2026-3091MEDIUMAn uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read or write arbitrary EPSS 0.2%CVE-2023-32272HIGHUncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an autEPSS 0.2%CVE-2026-21770MEDIUMHCL Traveler for Microsoft Outlook (HTMO) is susceptible to DLL hijackingEPSS 0.2%CVE-2025-10549MEDIUMDLL Hijacking in EfficientLab Controlio Leads to Local Privilege EscalationEPSS 0.2%CVE-2024-38387MEDIUMUncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentiaEPSS 0.2%CVE-2026-44406MEDIUMDLL Hijacking Vulnerability in ZTE Cloud PC Client uSmartviewEPSS 0.2%