Falhas do tipo CWE-428

356 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2023-25075MEDIUMUnquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated EPSS 0.2%CVE-2026-33253HIGHSANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on tEPSS 0.2%CVE-2025-59888MEDIUMImproper quotation in search paths in the Eaton UPS Companion software installer could lead to arbitrary code execution of an attacker with EPSS 0.2%CVE-2023-2331HIGHBypassing hardening via Unquoted Service path vulnerabilityEPSS 0.2%CVE-2025-61865HIGHMultiple NAS management applications provided by I-O DATA DEVICE, INC. register Windows services with unquoted file paths. A user with the wEPSS 0.2%CVE-2022-0357MEDIUMImproper Quoting Path Issue in Bitdefender Total SecurityEPSS 0.2%CVE-2025-24831MEDIUMLocal privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud AgentEPSS 0.2%CVE-2023-24542MEDIUMUnquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user tEPSS 0.2%CVE-2021-47739HIGHEpic Games Easy Anti-Cheat 4.0 Local Privilege Escalation via Unquoted Service PathEPSS 0.2%CVE-2025-10199HIGHA local privilege escalation vulnerability exists in LizardBytes' Sunshine for WindowsEPSS 0.2%CVE-2025-71326HIGHAVAST Antivirus 25.11 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2023-54336HIGHMediconta 3.7.27 - 'servermedicontservice' Unquoted Service PathEPSS 0.2%CVE-2024-22437HIGHHPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of PrivilegeEPSS 0.2%CVE-2025-59307HIGHRAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on theEPSS 0.2%CVE-2024-5402MEDIUMMint Workbench I Unquoted Service Path EnumerationEPSS 0.2%CVE-2023-24575HIGH Dell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulneraEPSS 0.2%CVE-2026-26033HIGHUPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Unquoted Search Path or Element (CWE-428) vulnerability, which EPSS 0.2%CVE-2020-36953HIGHMiniTool ShadowMaker 3.2 - 'MTAgentService' Unquoted Service PathEPSS 0.2%CVE-2020-36979HIGHAtheros Coex Service Application 8.0.0.255 -'ZAtheros Bt&Wlan Coex Agent' Unquoted Service PathEPSS 0.2%CVE-2021-47825HIGHAcer Updater Service 1.2.3500.0 - 'UpdaterService.exe' Unquoted Service PathEPSS 0.2%