Cwe 787

🧬 CWE Related 2,517
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,520

Image ID Title
CVE-2026-84016 Out-of-Bounds Write in Microsoft Windows EAPHost Service (CVE-2026-84016)
CVE-2026-83929 Out-of-Bounds Write in Microsoft Windows GDI (CVE-2026-83929)
CVE-2026-83910 Out-of-Bounds Write in Microsoft RPC Runtime (CVE-2026-83910)
CVE-2026-83712 Out-of-Bounds Write in Microsoft Windows NTFS (CVE-2026-83712)
CVE-2026-70303 Out-of-Bounds Write in Microsoft Windows Kernel (CVE-2026-70303)
CVE-2026-70058 Out-of-Bounds Write in Microsoft Windows DHCP Server (CVE-2026-70058)
CVE-2026-69705 Out-of-Bounds Write in Microsoft (CVE-2026-69705)
CVE-2026-108457 Out-of-Bounds Write in Microsoft Windows PDF (CVE-2026-108457)
CVE-2026-106625 Out-of-Bounds Write in Adobe Framemaker (CVE-2026-106625)
CVE-2026-105005 Out-of-Bounds Write in Microsoft Windows Schannel (CVE-2026-105005)
CVE-2026-103967 Out-of-Bounds Write in Adobe Framemaker (CVE-2026-103967)
CVE-2026-104341 Out-of-Bounds Write in Adobe Framemaker (CVE-2026-104341)
CVE-2026-109827 Buffer Overflow in GPAC (CVE-2026-109827)
CVE-2026-95115 Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a...
CVE-2026-77094 CvFWD contained an out-of-bounds write affecting service availability. Software customers...
CVE-2026-109680 Out-of-Bounds Write in FreeRDP (CVE-2026-109680)
CVE-2025-58773 Out-of-Bounds Write in AMI APTIOV (CVE-2025-58773)
CVE-2026-65149 Out-of-Bounds Write in NVIDIA DALI (CVE-2026-65149)
CVE-2026-109976 Out-of-Bounds Write in clevis PKCS#11 pin (CVE-2026-109976)
CVE-2026-41210 Out-of-Bounds Write in Moonlight Qt (CVE-2026-41210)
CVE-2026-6232 Out-of-Bounds Write in Semtech's LR11xx transceiver firmware (CVE-2026-6232)
CVE-2026-85969 Out-of-Bounds Write in Progress MarkLogic Server (CVE-2026-85969)
CVE-2026-21116 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers...
CVE-2026-21115 Out-of-bounds write in libcodec2-sec-flacdec.so prior to SMR Oct-2026 Release 1 allows local...
CVE-2026-21122 Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to...
CVE-2026-21114 Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers...
CVE-2026-108985 ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-bounds write related to lib...
CVE-2026-19736 The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the…
CVE-2026-19669 The user-mode syscall verifiers z_vrfy_fuel_gauge_get_props() and z_vrfy_fuel_gauge_set_props() in…
CVE-2026-19576 The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details