Cwe 787

CWE-787: 境界外書き込み 🧬 CWE 関連 2,517

slug: cwe-787

解説

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。

📌 具体例

CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。

🔗 関連リンク

MITRE CWE-787 公式ページ ↗

🔖 関連タグ

CWE-79: クロスサイトスクリプティング (XSS)8678 CWE-89: SQLインジェクション4152 Cwe 8624031 Cwe 2844027 CWE-416: 解放後使用 (Use-After-Free)3896 CWE-119: メモリの境界外操作3182 Cwe 2003138 Cwe 1253115 CWE-20: 入力検証の不備2856 CWE-22: パストラバーサル2769 CWE-78: OSコマンドインジェクション2021 CWE-94: コードインジェクション1870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 このタグに関連する脆弱性 2,520

ID	タイトル	重要度	検知
CVE-2026-61674	Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From…		3週間前
CVE-2026-17051	The Intel SEDI IPM (inter-processor mailbox) driver in drivers/ipm/ipm_sedi.c handles an inbound message interrupt in…	Medium	3週間前
CVE-2026-94054	Exim に境界外書き込み (CVE-2026-94054)	High	3週間前
CVE-2026-93894	In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found in the .upper() and .lower() string type…		4週間前
CVE-2026-61714	FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring…	High	4週間前
CVE-2026-75892	In osmo-ggsn 1.14.0 an out of bounds write issue was found in the gtp_decode_pdp_ctx() function through the PDP context…	Medium	4週間前
CVE-2026-77396	Teluu の脆弱性 (CVE-2026-77396)	High	4週間前
CVE-2026-91142	A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function,...	Low	4週間前
CVE-2026-84444	libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, when WITH_UNCOMPRESSED_CODEC is enabled…	High	4週間前
CVE-2026-84383	libheif is a HEIF and AVIF file format decoder and encoder. From 1.22.0 until 1.23.2, a crafted HEIF, HEIC, or AVIF…	Critical	4週間前
CVE-2026-67549	Openimageio の脆弱性 (CVE-2026-67549)	High	4週間前
CVE-2026-63638	Openimageio に境界外書き込み (CVE-2026-63638)	High	4週間前
CVE-2026-63422	Openimageio の脆弱性 (CVE-2026-63422)	High	4週間前
CVE-2026-63419	Openimageio に境界外書き込み (CVE-2026-63419)	High	4週間前
CVE-2026-59181	Openimageio の脆弱性 (CVE-2026-59181)	Medium	4週間前
CVE-2026-10027	Ibm に境界外書き込み (CVE-2026-10027)	High	4週間前
CVE-2026-81627	A flaw was found in QEMU. The VAPIC setup hypercall in hw/i386/vapic.c does not validate that the writable RAM alias…	High	4週間前
CVE-2026-15579	An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the…		4週間前
CVE-2026-93451	snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in typed Snappy.uncompress...	Medium	4週間前
CVE-2026-93452	snappy-java through 1.1.10.8 contains a buffer overflow vulnerability in Snappy.compress...	High	4週間前
CVE-2026-73639	Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a…	Critical	4週間前
CVE-2026-54634	Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld…	High	4週間前
CVE-2026-93393	MongoDB C Driver に境界外書き込み (CVE-2026-93393)	High	4週間前
CVE-2026-54627	SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles…	Critical	4週間前
CVE-2026-54692	SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles…	High	4週間前
CVE-2026-54626	SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles…	Critical	4週間前
CVE-2026-93015	BlueKitchen BTstack through 1.8.2 fails to validate the peer-reported endpoint count against table bounds in A2DP…	Medium	1ヶ月前
CVE-2026-92880	A weakness has been identified in vgmstream up to r2117. Impacted is the function vadpcm_read_coefs_be of the file…	Medium	1ヶ月前
CVE-2026-25280	Memory corruption when processing escape handling flow with insufficient user buffer sizes.	High	1ヶ月前
CVE-2026-24074	Qualcomm Iqx5121 Firmware に境界外書き込み (CVE-2026-24074)	High	1ヶ月前