Falhas do tipo CWE-427

922 resultados

Caminho de busca ou elemento não controlado

A aplicação procura por um recurso (arquivo, biblioteca, módulo) em múltiplos diretórios sem validar ou controlar a ordem de busca, permitindo que um atacante injete um arquivo malicioso em um caminho que será verificado primeiro. Isso leva a execução de código não autorizado ou bypass de controles de segurança.

Exemplo

Um programa em C carrega uma biblioteca dinâmica (DLL no Windows ou SO no Linux) procurando em diretórios listados em uma variável de ambiente. Se o atacante conseguir escrever um arquivo malicioso com o mesmo nome em um diretório anterior da busca (como o diretório atual), a aplicação carrega a versão maliciosa sem questionar.

Como mitigar

Use caminhos absolutos e hardcoded para recursos críticos; nunca confie em variáveis de ambiente para localizá-los. Valide hash ou assinatura digital de bibliotecas carregadas e restrinja permissões de escrita nos diretórios de busca apenas ao administrador.

CVE-2025-21093MEDIUMUncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenEPSS 0.1%CVE-2024-8766MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoEPSS 0.1%CVE-2026-12003MEDIUMCPython >3.11 Insecure Input Validation resulting in privilege escalationEPSS 0.1%CVE-2025-40979HIGHDLL search order hijack in Wave by Grandstream NetworksEPSS 0.1%CVE-2025-30506MEDIUMUncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applications may allow an escalEPSS 0.1%CVE-2026-47274MEDIUMpam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulationEPSS 0.1%CVE-2025-20048MEDIUMUncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially eEPSS 0.1%CVE-2025-20627MEDIUMUncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potEPSS 0.1%CVE-2024-29015MEDIUMUncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially EPSS 0.1%CVE-2025-22838MEDIUMUncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated userEPSS 0.1%CVE-2026-107615HIGHDLL search order hijacking via screenhooks libraries in TightVNC ServerEPSS 0.1%CVE-2024-28887MEDIUMUncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalatiEPSS 0.1%CVE-2025-20017MEDIUMUncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially eEPSS 0.1%CVE-2025-24923MEDIUMUncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potenEPSS 0.1%CVE-2024-28046MEDIUMUncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalatioEPSS 0.1%CVE-2024-49391MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Files (Windows) before buiEPSS 0.1%CVE-2024-34153MEDIUMUncontrolled search path element in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enablEPSS 0.1%CVE-2024-34019MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiEPSS 0.1%CVE-2024-26027MEDIUMUncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentialEPSS 0.1%CVE-2024-34017MEDIUMLocal privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiEPSS 0.1%