Falhas do tipo CWE-428

358 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2023-0887HIGHphjounin TFTPD64-SE tftpd64_svc.exe unquoted search pathEPSS 0.2%CVE-2023-29165MEDIUMUnquoted search path or element in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to poteEPSS 0.2%CVE-2019-25261HIGHAnyDesk 5.4.0 - Unquoted Service PathEPSS 0.2%CVE-2024-1201HIGHPanteraSoft HDD Health search path or unquoted item vulnerabilityEPSS 0.2%CVE-2022-27592MEDIUMQVR Smart ClientEPSS 0.2%CVE-2026-97860HIGHYMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissionsEPSS 0.2%CVE-2020-37060HIGHAtomic Alarm Clock x86 6.3 - 'AtomicAlarmClock' Unquoted Service PathEPSS 0.2%CVE-2023-25075MEDIUMUnquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated EPSS 0.2%CVE-2026-81469HIGHDell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attackEPSS 0.2%CVE-2025-59888MEDIUMImproper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with EPSS 0.2%CVE-2023-2331HIGHBypassing hardening via Unquoted Service path vulnerabilityEPSS 0.2%CVE-2026-18755HIGHGV-ASManager DLL hijacking vulnerabilityEPSS 0.2%CVE-2022-0357MEDIUMImproper Quoting Path Issue in Bitdefender Total SecurityEPSS 0.2%CVE-2025-24831MEDIUMLocal privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud AgentEPSS 0.2%CVE-2025-10199HIGHA local privilege escalation vulnerability exists in LizardBytes' Sunshine for WindowsEPSS 0.2%CVE-2020-36953HIGHMiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service PathEPSS 0.2%CVE-2023-24542MEDIUMUnquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user tEPSS 0.2%CVE-2023-54336HIGHMediconta 3.7.27 - 'servermedicontservice' Unquoted Service PathEPSS 0.2%CVE-2026-26033HIGHUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which EPSS 0.2%CVE-2021-47739HIGHEpic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service PathEPSS 0.2%