Falhas do tipo CWE-427

922 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2023-29151MEDIUMUncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escaEPSS 0.2%CVE-2023-25944MEDIUMUncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user toEPSS 0.2%CVE-2023-28405MEDIUMUncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potEPSS 0.2%CVE-2022-43456MEDIUMUncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may alEPSS 0.2%CVE-2023-31197MEDIUMUncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentEPSS 0.2%CVE-2025-60749HIGHDLL Hijacking vulnerability in Trimble SketchUp desktop 2025 via crafted libcef.dll used by sketchup_webhelper.exe.EPSS 0.2%CVE-2024-39820MEDIUMZoom Workplace Desktop App for macOS - Uncontrolled Search Path ElementEPSS 0.2%CVE-2025-8087HIGHA DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallEPSS 0.2%CVE-2026-8164HIGHSearch Order Hijacking in ArkSigner's ArkSigner Desktop ClientEPSS 0.2%CVE-2026-104349HIGHCreative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)EPSS 0.2%CVE-2026-83598HIGHNetdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI RepairEPSS 0.2%CVE-2025-54512HIGHA DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, EPSS 0.2%CVE-2023-25182MEDIUMUncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to pEPSS 0.2%CVE-2024-53977MEDIUMA vulnerability has been identified in ModelSim (All versions < V2025.1), Questa (All versions < V2025.1). An example setup script containedEPSS 0.2%CVE-2025-62185MEDIUMIn Ankitects Anki before 25.02.5, a crafted shared deck can place a YouTube downloader executable in the media folder, and this is executed EPSS 0.2%CVE-2024-21857MEDIUMUncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enaEPSS 0.2%CVE-2024-23491MEDIUMUncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentialEPSS 0.2%CVE-2024-23489MEDIUMUncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escEPSS 0.2%CVE-2025-10089HIGHMalicious Code Execution Vulnerability in Setting and Operation Application for Lighting Control System MILCO.SEPSS 0.2%CVE-2024-21766MEDIUMUncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to poteEPSS 0.2%