Falhas do tipo CWE-441

231 resultados

Deputado Confuso (intermediário não intencional)

Ocorre quando um programa confiável é explorado para executar ações em nome de um atacante, porque não valida corretamente quem está pedindo e em qual contexto. O programa age como intermediário involuntário, abusando de seus privilégios para fazer algo que não deveria.

Exemplo

Um serviço web roda com permissões altas e aceita uma URL ou caminho como parâmetro sem validar a origem. Um atacante envia requisição malformada que o serviço interpreta como vindo de um usuário legítimo, causando dele mesmo deletar arquivos ou acessar dados sensíveis que o atacante sozinho não poderia.

Como mitigar

Valide rigorosamente a origem, contexto e intenção de cada requisição (quem está pedindo, de onde, e se tem direito). Implemente verificação de autenticação robusta, use tokens com escopo limitado (OAuth 2.0), e nunca confie apenas em parâmetros do usuário para tomar decisões de segurança ou privilégio.

CVE-2026-47122MEDIUMSparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injectionEPSS 0.1%CVE-2025-48646HIGHIn executeRequest of ActivityStarter.java, there is a possible launch anywhere due to a confused deputy. This could lead to local escalationEPSS 0.1%CVE-2026-45520HIGHIn onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escEPSS 0.1%CVE-2026-49922HIGHIn queryRemoteConnectionServices of ConnectionServiceWrapper.java, there is a possible permission bypass due to a confused deputy. This coulEPSS 0.1%CVE-2026-58884HIGHIn startTetheredHotspotRequest of WifiServiceImpl.java, there is a possible permission bypass due to a confused deputy. This could lead to lEPSS 0.1%CVE-2026-59000HIGHIn multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-58885HIGHIn multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-58965HIGHIn handleAudioEffectBroadcast of MusicFxHelper.java, there is a possible permission bypass due to a confused deputy. This could lead to locaEPSS 0.1%CVE-2026-0021HIGHIn hasInteractAcrossUsersFullPermission of AppInfoBase.java, there is a possible cross-user permission bypass due to a confused deputy. ThisEPSS 0.1%CVE-2026-56986HIGHIn multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no adEPSS 0.1%CVE-2025-26454HIGHIn validateUriSchemeAndPermission of DisclaimersParserImpl.java , there is a possible way to access data from another user due to a confusedEPSS 0.1%CVE-2026-56985HIGHIn multiple files, there is a possible way to obtain signatures due to type confusion. This could lead to local escalation of privilege withEPSS 0.1%CVE-2026-59028HIGHIn resolveAidConflictLocked of RegisteredAidCache.java, there is a possible permission bypass due to a confused deputy. This could lead to lEPSS 0.1%CVE-2026-58944HIGHIn moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background application launch (bal) issue due to a confusedEPSS 0.1%CVE-2026-58957HIGHIn resolveToHeavyWeightSwitcherIfNeeded of ActivityStarter.java, there is a possible background activity launch due to a confused deputy. ThEPSS 0.1%CVE-2026-49931HIGHIn onActivityResult in multiple locations, there is a possible contact leak from protected profile due to a confused deputy. This could leadEPSS 0.1%CVE-2026-58943HIGHIn run of AddAccountSettings.java, there is a possible background activity launch due to a confused deputy. This could lead to local escalatEPSS 0.1%CVE-2026-55271HIGHIn forwardToPreferredActionPickHandler of ContactsPickerActivity.kt, there is a possible intent redirection due to a confused deputy. This cEPSS 0.1%CVE-2026-58970HIGHIn deliverResult of AppTimeTracker.java, there is a possible background activity launch due to a confused deputy. This could lead to local eEPSS 0.1%CVE-2026-55289HIGHIn multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could leadEPSS 0.1%