Falhas do tipo CWE-428

357 resultados

Caminho de busca sem aspas ou elemento desprotegido

Ocorre quando um programa busca executar um arquivo ou carregar uma biblioteca sem aspas no caminho, ou sem validar o local exato. Um atacante coloca um arquivo malicioso em um diretório anterior da busca, forçando o programa a executar o arquivo dele em vez do legítimo.

Exemplo

Um instalador Windows tenta executar 'C:\Program Files\Aplicacao\bin\tool.exe' sem aspas. Se o caminho contém espaço e o programa busca executáveis também em diretórios do sistema, um atacante cria 'C:\Program.exe' que será carregado antes.

Como mitigar

Use caminhos absolutos com aspas duplas em toda chamada de programa ou biblioteca (ex: '"C:\\Caminho Completo\\arquivo.exe"'). Valide e normalize todos os caminhos dinâmicos antes de usar, rejeitando qualquer que não corresponda exatamente ao esperado.

CVE-2025-12286HIGHVeePN AVService avservice.exe unquoted search pathEPSS 0.2%CVE-2025-71326HIGHAVAST Antivirus 25.11 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2025-36384HIGHIBM Db2 Privilege EscalationEPSS 0.2%CVE-2026-33253HIGHSANUPS SOFTWARE provided by SANYO DENKI CO., LTD. registers Windows services with unquoted file paths. A user with the write permission on tEPSS 0.2%CVE-2024-22437HIGHHPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of PrivilegeEPSS 0.2%CVE-2024-5402MEDIUMMint Workbench I Unquoted Service Path EnumerationEPSS 0.2%CVE-2020-36981HIGHMotorola Device Manager 2.4.5 - 'ForwardDaemon.exe ' Unquoted Service PathEPSS 0.2%CVE-2020-36983HIGHQuick 'n Easy FTP Service 3.2 - Unquoted Service PathEPSS 0.2%CVE-2023-24575HIGH Dell Multifunction Printer E525w Driver and Software Suite, versions prior to 1.047.2022, A05, contain a local privilege escalation vulneraEPSS 0.2%CVE-2025-59307HIGHRAID Manager provided by Century Corporation registers a Windows service with an unquoted file path. A user with the write permission on theEPSS 0.2%CVE-2016-20059HIGHIObit Malware Fighter 4.3.1 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2016-20055HIGHIObit Advanced SystemCare 10.0.2 Unquoted Service Path Privilege EscalationEPSS 0.2%CVE-2019-25285HIGHAlps Pointing-device Controller 8.1202.1711.04 - 'ApHidMonitorService' Unquoted Service PathEPSS 0.2%CVE-2020-36976HIGHGlobal Registration Service 1.0.0.3 - 'GREGsvc.exe' Unquoted Service PathEPSS 0.2%CVE-2020-36975HIGHEPSON Status Monitor 3 'EPSON_PM_RPCV4_06' - Unquoted Service PathEPSS 0.2%CVE-2019-25283HIGHShrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service PathEPSS 0.2%CVE-2020-36982HIGHMotorola Device Manager 2.5.4 - 'MotoHelperService.exe' Unquoted Service PathEPSS 0.2%CVE-2019-25281HIGHNCP_Secure_Entry_Client 9.2 - Unquoted Service PathsEPSS 0.2%CVE-2020-36974HIGHRealtek Andrea RT Filters 1.0.64.7 - 'AERTSr64.EXE' Unquoted Service PathEPSS 0.2%CVE-2026-2542HIGHTotal VPN win-service.exe unquoted search pathEPSS 0.2%