Fallos del tipo CWE-114

26 resultados

Controle inadequado de processos

Fraqueza na forma como um programa inicia, gerencia ou finaliza processos do sistema operacional, permitindo que um atacante execute código não autorizado ou assuma controle indevido de processos sensíveis. O risco surge quando faltam validações nas entradas que direcionam a execução de processos ou quando permissões de processos não são corretamente restringidas.

Ejemplo

Uma aplicação web que permite ao usuário especificar qual programa executar via parâmetro de entrada (ex: `exec($_GET['cmd'])` em PHP) sem validação, ou um serviço Windows que carrega DLLs de diretórios com permissões insuficientes, permitindo injeção de código malicioso antes da execução.

Cómo mitigar

Validar e escapar rigorosamente todas as entradas que influenciam a criação de processos; usar listas brancas de programas permitidos; executar processos com privilégios mínimos necessários; em Windows, garantir que caminhos de bibliotecas sejam protegidos contra escrita por usuários não autorizados.

CVE-2022-23748HIGHmDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to load the DLL, from which folder and under EPSS 8.5%KEVCVE-2020-11075HIGHShell Escape in Anchore EngineEPSS 1.8%CVE-2024-32004HIGHGit vulnerable to Remote Code Execution while cloning special-crafted local repositoriesEPSS 1.4%CVE-2019-8461—Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean imEPSS 1.1%CVE-2024-56346CRITICALIBM AIX command executionEPSS 1.1%CVE-2019-8458—Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLLEPSS 1.0%CVE-2021-25736MEDIUMWindows kube-proxy LoadBalancer contentionEPSS 0.9%CVE-2024-56347CRITICALIBM AIX command executionEPSS 0.9%CVE-2025-36250CRITICALAIX Code ExecutionEPSS 0.7%CVE-2020-11081MEDIUMosquery susceptible to DLL search order hijacking of zlib1.dllEPSS 0.6%CVE-2025-36251CRITICALAIX Command ExecutionEPSS 0.5%CVE-2025-0160HIGHIBM FlashSystem code executionEPSS 0.5%CVE-2020-6014—Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades installed, before version E83.20, tries to load aEPSS 0.4%CVE-2026-29046CRITICALTinyWeb: HTTP Header Control Character Injection into CGI EnvironmentEPSS 0.4%CVE-2023-40299—Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by usingEPSS 0.4%CVE-2020-8107HIGHProcess Control vulnerability in Bitdefender Antivirus PlusEPSS 0.3%CVE-2019-8453—Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where all users have write permissions. This can EPSS 0.3%CVE-2024-25021HIGHIBM AIX command executionEPSS 0.3%CVE-2020-6024—Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 54EPSS 0.3%CVE-2024-44168MEDIUMA library injection issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS VentEPSS 0.2%