Falhas do tipo CWE-693

961 resultados

Falha em Mecanismo de Proteção

CWE-693 descreve quando um mecanismo de segurança implementado no software não funciona como deveria, seja por design deficiente, implementação incorreta ou bypass não intencional. O resultado é que uma ou mais camadas de defesa falham, deixando o sistema exposto a ataques que deveriam ter sido bloqueados.

Exemplo

Um sistema implementa validação de entrada apenas no cliente (JavaScript), mas deixa a API backend sem validação equivalente. Um atacante contorna a proteção do cliente e envia dados maliciosos diretamente para o servidor, que as aceita sem filtro. O mecanismo de proteção falhou porque estava incompleto.

Como mitigar

Implementar controles de segurança em profundidade (nunca confiar apenas em uma camada), validar e sanitizar dados em todos os pontos de entrada, testar regularmente se as proteções estão funcionando conforme esperado, e documentar claramente qual é a intenção de cada controle de segurança.

CVE-2026-93325HIGHBake filesystem entitlement consent is skipped under --progress=rawjson in Docker BuildxEPSS 0.1%CVE-2024-31328HIGHIn broadcastIntentLockedTraced of BroadcastController.java, there is a possible way to launch arbitrary activities from the background on thEPSS 0.1%CVE-2026-102673HIGHElectron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTabEPSS 0.1%CVE-2025-24848MEDIUMProtection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow anEPSS 0.1%CVE-2026-48792MEDIUMpam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root executionEPSS 0.1%CVE-2026-104024MEDIUMIncomplete dangerous-extension list in PeaZip object open allows execution of a program or command from a crafted archive entry without confirmationEPSS 0.1%CVE-2025-24284HIGHThis issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4. An app may be ableEPSS 0.1%CVE-2025-10905MEDIUMCollision in minifilter driver of Avast Free Antivirus results in disabling of real-time protectionEPSS 0.1%CVE-2026-110689MEDIUMOpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanismEPSS 0.1%CVE-2025-30431MEDIUMThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A maliciEPSS 0.1%CVE-2026-102734MEDIUMasteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterEPSS 0.1%CVE-2025-22437HIGHIn setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due to a logic error in EPSS 0.1%CVE-2026-8004MEDIUMInsufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a maEPSS 0.1%CVE-2026-12214HIGHQihoo 360 Total Security Nucleus Engine Monitoring Logic RpcStringBindingComposeW protection mechanismEPSS 0.1%CVE-2025-35968HIGHProtection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may allow an escalation of privilege. Startup codeEPSS 0.1%CVE-2026-77474HIGHdcg: Exponential-time command-substitution preprocessing lets a crafted command hang dcg and bypass the guard via hook-timeout fail-openEPSS 0.1%CVE-2026-20728MEDIUMProtection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may aEPSS 0.1%CVE-2026-24693MEDIUMProtection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow EPSS 0.1%CVE-2026-20755MEDIUMProtection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege. UnprivilegeEPSS 0.1%CVE-2026-20770MEDIUMProtection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User ApplicatiEPSS 0.1%