Cwe 787

🧬 CWE Related 2,520
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,521

Image ID Title
CVE-2026-15105 Vulnerability in davenardella snap7 (CVE-2026-15105)
CVE-2026-0288 Out-of-Bounds Write in Pan Os (CVE-2026-0288)
CVE-2026-59948 Path Traversal in composer/composer (CVE-2026-59948)
CVE-2026-57260 Out-of-Bounds Write in Microsoft Windows (CVE-2026-57260)
CVE-2026-14739 Out-of-Bounds Write in DBI (CVE-2026-14739)
CVE-2026-42953 The application contains an out-of-bounds write vulnerability that can be exploited by an...
CVE-2026-21384 Out-of-Bounds Write in Qualcomm Fastconnect 6700 Firmware (CVE-2026-21384)
CVE-2026-21369 Out-of-Bounds Write in Qualcomm Fastconnect 6200 Firmware (CVE-2026-21369)
CVE-2026-21370 Out-of-Bounds Write in Qualcomm Fastconnect 6700 Firmware (CVE-2026-21370)
CVE-2026-21368 Out-of-Bounds Write in Qualcomm Fastconnect 6700 Firmware (CVE-2026-21368)
CVE-2026-40257 Out-of-Bounds Write in OP-TEE (CVE-2026-40257)
CVE-2026-53362 KEV [KEV] Out-of-Bounds Write in Linux kernel (CVE-2026-53362)
CVE-2026-14612 Two off-by-one errors in the FreeIPA ipa-otpd daemon's OAuth2 device authorization handler can...
CVE-2026-8247 Vulnerability in WatchGuard Fireware OS (CVE-2026-8247)
CVE-2026-13384 Out-of-Bounds Write in WatchGuard Fireware OS wgagent process (CVE-2026-13384)
CVE-2026-13383 Out-of-Bounds Write in WatchGuard Fireware OS ikestubd process (CVE-2026-13383)
CVE-2026-13053 Out-of-Bounds Write in WatchGuard Fireware OS's CLI (CVE-2026-13053)
CVE-2026-13050 Out-of-Bounds Write in WatchGuard Fireware OS networkd process (CVE-2026-13050)
CVE-2026-14422 Out-of-Bounds Read in Google Chrome (CVE-2026-14422)
CVE-2026-14420 Out-of-Bounds Read in Google Chrome (CVE-2026-14420)
CVE-2026-14395 Out-of-Bounds Write in Google Chrome (CVE-2026-14395)
CVE-2026-14400 Out-of-Bounds Write in Google Chrome (CVE-2026-14400)
CVE-2026-14397 Out-of-Bounds Write in Google Chrome (CVE-2026-14397)
CVE-2026-14392 Out-of-Bounds Write in Google Chrome (CVE-2026-14392)
CVE-2026-14385 Vulnerability in Google Chrome (CVE-2026-14385)
CVE-2026-58592 Out-of-Bounds Write in Ladybird (CVE-2026-58592)
CVE-2026-55597 Vulnerability in Magick.NET-Q16-AnyCPU (CVE-2026-55597)
CVE-2026-55577 Vulnerability in Imagemagick (CVE-2026-55577)
CVE-2025-23350 NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user...
CVE-2025-23351 NVIDIA ConnectX and BlueField contain a vulnerability in the command interface where a local user...

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details