Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 2,517
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,520

Image ID Title
CVE-2026-102730 Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap…
CVE-2026-102729 `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource…
CVE-2026-102715 Any host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The…
CVE-2026-72897 Out-of-Bounds Write in Openssl (CVE-2026-72897)
CVE-2026-63209 compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in…
CVE-2026-102566 CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate…
CVE-2026-95520 A heap-based buffer overflow flaw was found in rpm. Parsing a symlink entry in an untrusted RPM package whose declared…
CVE-2026-15390 Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram…
CVE-2026-102474 A flaw was found in dash. The printf builtin reserves four bytes before converting a Unicode \u or \U escape, but the…
CVE-2026-86950 KEV [KEV] Out-of-Bounds Write in Apple Multiple Products (CVE-2026-86950)
CVE-2026-101202 A flaw has been found in FastStone Image Viewer up to 8.3. The affected element is an unknown function of the component…
CVE-2026-101203 A vulnerability has been found in FastStone Image Viewer up to 8.3. The impacted element is an unknown function of the…
CVE-2026-18413 The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size…
CVE-2026-18414 The ADC API requires each driver to reject a sampling sequence whose destination buffer is too small: the buffer_size…
CVE-2026-18415 ieee802154_send() in subsys/net/l2/ieee802154/ieee802154.c copies the outgoing packet into a single fixed 125-byte…
CVE-2026-16513 The userspace verifier z_vrfy_rtio_sqe_copy_in_get_handles() in subsys/rtio/rtio_syscalls.c…
CVE-2026-102004 Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory…
CVE-2026-100888 A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function…
CVE-2026-100740 A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file…
CVE-2026-100504 Out-of-Bounds Write in Nsa (CVE-2026-100504)
CVE-2026-80431 Out-of-bounds Write in the natural width branch of the text sizing protocol in kitty from 0.40.0 before 0.49.0 allows a…
CVE-2026-98159 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate...
CVE-2026-87118 The Botslab G980H dash camera firmware contains an out of bounds write vulnerability in its command processing…
CVE-2026-88390 An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted…
CVE-2026-88378 QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().
CVE-2026-96746 An out-of-bounds write in the connection-monitoring logic of the MongoDB C Driver may allow an unauthenticated party…
CVE-2026-13467 Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or…
CVE-2026-97185 A flaw was found in GIMP. When processing a specially crafted GIMPressionist preset file, the...
CVE-2026-96891 A vulnerability was identified in D-Link DIR-825 3.00b32. Affected is the function tunnel_set_params of the file…
CVE-2026-88839 BusyBox passwd/group tokenize() references a stale endpoint pointer after trimming, causing an out-of-bounds write of…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details