Connexion Inscription
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Liées 2,517
slug: cwe-787

Explication

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Exemple
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Liens utiles

🔖 Étiquettes liées

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnérabilités associées 2,520

Image ID Titre
CVE-2026-88832 BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled metadata, causing a heap buffer overflow…
CVE-2026-91815 Écriture hors limites dans Microsoft Windows (CVE-2026-91815)
CVE-2026-91811 Écriture hors limites dans Microsoft Windows (CVE-2026-91811)
CVE-2026-91804 Écriture hors limites dans Microsoft Windows (CVE-2026-91804)
CVE-2026-91802 Écriture hors limites dans Microsoft Windows (CVE-2026-91802)
CVE-2026-91794 An out-of-bounds write vulnerability exists in the PDF rendering process of Foxit PDF Editor/Reader due to insufficient…
CVE-2026-91789 Écriture hors limites dans Microsoft Windows (CVE-2026-91789)
CVE-2026-18095 Écriture hors limites dans Ibm Financial Transaction Manager (CVE-2026-18095)
CVE-2026-17636 Écriture hors limites dans Ibm Financial Transaction Manager (CVE-2026-17636)
CVE-2026-87121 lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution…
CVE-2026-95862 A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi…
CVE-2026-83963 Écriture hors limites dans Adobe Substance 3D Modeler (CVE-2026-83963)
CVE-2026-81998 Écriture hors limites dans Adobe Substance 3D Modeler (CVE-2026-81998)
CVE-2026-79906 Écriture hors limites dans Adobe Substance 3D Modeler (CVE-2026-79906)
CVE-2026-77544 A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi…
CVE-2026-77555 A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi…
CVE-2026-75658 Écriture hors limites dans Adobe Bridge (CVE-2026-75658)
CVE-2026-75663 Écriture hors limites dans Adobe Bridge (CVE-2026-75663)
CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional (Core Libraries) allows Overflow…
CVE-2026-83601 Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized…
CVE-2026-81878 Vulnérabilité dans Radare (CVE-2026-81878)
CVE-2026-63273 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The…
CVE-2026-63276 LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens when a document is exported to PDF, and…
CVE-2026-63275 LibreOffice can read CFF fonts, which may be embedded in documents. A stack buffer overflow existed when reading the…
CVE-2026-63274 LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing a stream object. The length of…
CVE-2026-63272 LibreOffice can import WMF graphics, which may be embedded in documents. A heap buffer overflow existed when importing…
CVE-2026-95508 A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is…
CVE-2026-88407 An out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (Redis module) v4.20.1 to…
CVE-2026-17052 The Time-aware GPIO syscall verification handler z_vrfy_tgpio_pin_read_ts_ec() in…
CVE-2026-92382 An out-of-bounds write flaw was found in usbredir. Starting an isochronous OUT stream with a transfer count of 1 leaves…

Nous utilisons des cookies pour l'analyse d'audience et la mesure publicitaire. Ce réglage s'applique à tous les sites de Game co., Ltd. En savoir plus