Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 2,520
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,521

Image ID Title
CVE-2021-3517 Out-of-Bounds Write in Oracle Xmlsoft (CVE-2021-3517)
CVE-2020-21843 Out-of-Bounds Write in Gnu Libredwg (CVE-2020-21843)
CVE-2020-21840 Out-of-Bounds Write in Gnu Libredwg (CVE-2020-21840)
CVE-2020-21827 Out-of-Bounds Write in GNU LibreDWG (CVE-2020-21827)
CVE-2020-21814 Out-of-Bounds Write in GNU LibreDWG (CVE-2020-21814)
CVE-2020-21816 Out-of-Bounds Write in GNU LibreDWG (CVE-2020-21816)
CVE-2020-21818 Out-of-Bounds Write in GNU LibreDWG (CVE-2020-21818)
CVE-2020-21819 Out-of-Bounds Write in GNU LibreDWG 0.10.2641via htmlescape ../ (CVE-2020-21819)
CVE-2020-21813 Out-of-Bounds Write in GNU LibreDWG (CVE-2020-21813)
CVE-2021-3501 Out-of-Bounds Write in Linux Kernel (CVE-2021-3501)
CVE-2021-1504 Out-of-Bounds Write in Cisco Adaptive Security Appliance (ASA) Software (CVE-2021-1504)
CVE-2021-1445 Out-of-Bounds Write in Cisco Adaptive Security Appliance (ASA) Software (CVE-2021-1445)
CVE-2021-20305 Vulnerability in Nettle Project (CVE-2021-20305)
CVE-2021-25667 Vulnerability in RUGGEDCOM RM1224 (CVE-2021-25667)
CVE-2017-14491 Out-of-Bounds Write in platform/external/dnsmasq (CVE-2017-14491)
CVE-2020-26664 Out-of-Bounds Write in VideoLAN VLC media player (CVE-2020-26664)
CVE-2020-29363 Out-of-Bounds Write in p11-kit (CVE-2020-29363)
CVE-2020-8285 Vulnerability in Apple macOS (CVE-2020-8285)
CVE-2020-29573 Out-of-Bounds Write in GNU C Library (CVE-2020-29573)
CVE-2020-7563 Out-of-Bounds Write in schneider-electric (CVE-2020-7563)
CVE-2019-15992 Buffer Overflow in Cisco Adaptive Security Appliance (CVE-2019-15992)
CVE-2020-24659 Vulnerability in GnuTLS (CVE-2020-24659)
CVE-2020-14498 Vulnerability in HMS Industrial Networks AB eCatcher all (CVE-2020-14498)
CVE-2020-10543 Vulnerability in Oracle Configuration Manager (CVE-2020-10543)
CVE-2020-1136 Buffer Overflow in Microsoft Windows 10 (CVE-2020-1136)
CVE-2020-1150 Buffer Overflow in Microsoft Windows 7 (CVE-2020-1150)
CVE-2020-1126 Buffer Overflow in Microsoft Windows 10 (CVE-2020-1126)
CVE-2020-1093 Buffer Overflow in Microsoft Internet Explorer (CVE-2020-1093)
CVE-2020-1092 Buffer Overflow in Microsoft Internet Explorer (CVE-2020-1092)
CVE-2020-1058 Buffer Overflow in Microsoft Internet Explorer (CVE-2020-1058)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details