Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 2,520
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,521

Image ID Title
CVE-2020-0938 KEV [KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-0938)
CVE-2020-0986 KEV [KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-0986)
CVE-2020-1020 KEV [KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2020-1020)
CVE-2021-1732 KEV [KEV] Out-of-Bounds Write in Microsoft Win32k (CVE-2021-1732)
CVE-2021-28310 KEV [KEV] Out-of-Bounds Write in Microsoft Win32k (CVE-2021-28310)
CVE-2018-8653 KEV [KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2018-8653)
CVE-2018-0798 KEV [KEV] Out-of-Bounds Write in Microsoft Office (CVE-2018-0798)
CVE-2018-0802 KEV [KEV] Out-of-Bounds Write in Microsoft Office (CVE-2018-0802)
CVE-2019-1367 KEV [KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2019-1367)
CVE-2020-1380 KEV [KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2020-1380)
CVE-2019-1429 KEV [KEV] Use-After-Free in Microsoft Internet Explorer (CVE-2019-1429)
CVE-2020-0968 KEV [KEV] Out-of-Bounds Write in Microsoft Internet Explorer (CVE-2020-0968)
CVE-2020-1054 KEV [KEV] Out-of-Bounds Write in Microsoft Win32k (CVE-2020-1054)
CVE-2021-34448 KEV [KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2021-34448)
CVE-2020-14871 KEV [KEV] Out-of-Bounds Write in Oracle Solaris and Zettabyte File System (ZFS) (CVE-2020-14871)
CVE-2021-35211 KEV [KEV] Out-of-Bounds Write in SolarWinds Serv-U (CVE-2021-35211)
CVE-2021-31755 KEV [KEV] Out-of-Bounds Write in Tenda AC11 Router (CVE-2021-31755)
CVE-2019-5544 KEV [KEV] Out-of-Bounds Write in VMware ESXi and Horizon DaaS (CVE-2019-5544)
CVE-2021-40118 Vulnerability in Cisco Adaptive Security Appliance (ASA) Software (CVE-2021-40118)
CVE-2020-15358 Out-of-Bounds Write in platform/external/sqlite (CVE-2020-15358)
CVE-2021-38653 Out-of-Bounds Write in Microsoft Office (CVE-2021-38653)
CVE-2021-36952 Out-of-Bounds Write in Visual Studio (CVE-2021-36952)
CVE-2021-26435 Out-of-Bounds Write in Windows Scripting Engine (CVE-2021-26435)
CVE-2021-33286 Out-of-Bounds Write in NTFS-3G (CVE-2021-33286)
CVE-2021-33287 Out-of-Bounds Write in NTFS-3G (CVE-2021-33287)
CVE-2021-35268 Out-of-Bounds Write in NTFS-3G (CVE-2021-35268)
CVE-2021-34480 Out-of-Bounds Write in Scripting Engine (CVE-2021-34480)
CVE-2021-34201 Out-of-Bounds Write in D-Link DIR-2640-US (CVE-2021-34201)
CVE-2021-34202 Out-of-Bounds Write in D-Link AC2600(DIR-2640) (CVE-2021-34202)
CVE-2021-3520 Vulnerability in Oracle Lz4 Project (CVE-2021-3520)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details