Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 2,520
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,521

Image ID Title
CVE-2026-6071 A remote code execution security issue exists in the affected products when parsing DOE files...
CVE-2025-12768 A security issue exists within FactoryTalk® Historian Machine Edition. An attacker with low-level...
CVE-2026-85084 Vulnerability in Samsung Open Source TizenFX Samsung/TizenFX (CVE-2026-85084)
CVE-2026-85091 Out-of-Bounds Write in zlib (CVE-2026-85091)
CVE-2026-71221 Out-of-Bounds Write in Enterprise Linux (CVE-2026-71221)
CVE-2026-71220 Out-of-Bounds Write in Enterprise Linux (CVE-2026-71220)
CVE-2026-84698 Out-of-Bounds Write in PX4 Autopilot (CVE-2026-84698)
CVE-2026-13732 Out-of-Bounds Write in GDB's STABS debug format parser (CVE-2026-13732)
CVE-2026-14368 The LwM2M JSON content formatter's get_string() in subsys/net/lib/lwm2m/lwm2m_rw_json.c copies a parsed JSON string…
CVE-2026-82680 Buffer Overflow in D-Link DSM-G600 (CVE-2026-82680)
CVE-2026-58106 Out-of-Bounds Write in CodeChecker (CVE-2026-58106)
CVE-2026-18393 Out-of-Bounds Write in FFmpeg (CVE-2026-18393)
CVE-2026-78008 Out-of-Bounds Write in WatchGuard Fireware OS Management Web UI (CVE-2026-78008)
CVE-2026-78011 Vulnerability in WatchGuard Fireware OS iked process (CVE-2026-78011)
CVE-2026-78010 Vulnerability in WatchGuard Fireware OS iked process iallows a (CVE-2026-78010)
CVE-2026-19314 Vulnerability in WatchGuard Fireware OS iked process (CVE-2026-19314)
CVE-2026-13086 Vulnerability in WatchGuard Fireware OS (CVE-2026-13086)
CVE-2026-68967 Out-of-Bounds Write in Bendix EC80 Brake ECU (CVE-2026-68967)
CVE-2026-81893 Out-of-Bounds Write in gdk-pixbuf (CVE-2026-81893)
CVE-2026-76640 Vulnerability in Unitree G1 EDU firmware (CVE-2026-76640)
CVE-2026-34620 Out-of-Bounds Write in DNG SDK (CVE-2026-34620)
CVE-2026-18374 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the ...
CVE-2026-81334 darknet subscripts its layer array with an index taken from a configuration file without checking...
CVE-2026-26459 ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing...
CVE-2026-81625 A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test...
CVE-2026-19398 “unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU...
CVE-2025-70290 Vulnerability in Denx U-Boot (CVE-2025-70290)
CVE-2026-58096 LcpDecodeConfig() did not validate the length of received endpoint discriminator options against...
CVE-2026-9805 SMM IHISI command handler, FMTSWriteUseIntelLib, for FMTS command 0x32, read and write data...
CVE-2022-0995 KEV [KEV] Out-of-Bounds Write in Linux Kernel (CVE-2022-0995)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details