Sign in Sign up
JA · EN · FR
SecPulse

Cwe 20

🧬 CWE Related 2,857
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,858

Image ID Title
CVE-2026-100120 Vulnerability in CAI Content Credentials (CVE-2026-100120)
CVE-2026-100119 Vulnerability in CAI Content Credentials (CVE-2026-100119)
CVE-2026-100125 Vulnerability in CAI Content Credentials (CVE-2026-100125)
CVE-2026-100117 Vulnerability in CAI Content Credentials (CVE-2026-100117)
CVE-2026-100113 Vulnerability in CAI Content Credentials (CVE-2026-100113)
CVE-2026-88089 Vulnerability in Microsoft SQL Server (CVE-2026-88089)
CVE-2026-85473 The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat)…
CVE-2026-78628 Vulnerability in Okta Credential Provider for Windows (CVE-2026-78628)
CVE-2026-75995 Vulnerability in ColdFusion (CVE-2026-75995)
CVE-2026-106619 Vulnerability in Adobe Coldfusion (CVE-2026-106619)
CVE-2026-106613 Vulnerability in Adobe Coldfusion (CVE-2026-106613)
CVE-2026-105900 Vulnerability in Adobe Coldfusion (CVE-2026-105900)
CVE-2026-106626 Vulnerability in Adobe Experience Manager (CVE-2026-106626)
CVE-2026-105895 Vulnerability in Adobe Experience Manager (CVE-2026-105895)
CVE-2026-97805 Vulnerability in Microsoft Windows Partition Management Driver (CVE-2026-97805)
CVE-2026-97769 Vulnerability in Microsoft Office Excel (CVE-2026-97769)
CVE-2026-95631 Vulnerability in Adobe Commerce (CVE-2026-95631)
CVE-2026-95630 Vulnerability in Adobe Commerce (CVE-2026-95630)
CVE-2026-92464 Vulnerability in Adobe Commerce (CVE-2026-92464)
CVE-2026-85797 Vulnerability in Microsoft Windows GDI (CVE-2026-85797)
CVE-2026-83891 Vulnerability in Microsoft Office Word (CVE-2026-83891)
CVE-2026-83798 Vulnerability in Microsoft Windows Update Stack (CVE-2026-83798)
CVE-2026-70294 Vulnerability in Microsoft Windows Win32 Kernel Subsystem (CVE-2026-70294)
CVE-2026-70177 Vulnerability in Microsoft Windows Search Component (CVE-2026-70177)
CVE-2026-70126 Vulnerability in Microsoft Windows Bluetooth Port Driver (CVE-2026-70126)
CVE-2026-70024 Vulnerability in Microsoft Windows Internet Information Services (CVE-2026-70024)
CVE-2026-69934 Vulnerability in Microsoft Windows Spaceport.sys (CVE-2026-69934)
CVE-2026-105717 Vulnerability in Microsoft Office Access (CVE-2026-105717)
CVE-2026-105718 Vulnerability in Microsoft Office Excel (CVE-2026-105718)
CVE-2026-105719 Vulnerability in Microsoft Sharepoint Server (CVE-2026-105719)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details