Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 2,520
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 782028 Cwe 941871 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 2,521

Image ID Title
CVE-2026-62817 Out-of-Bounds Write in Windows DNS (CVE-2026-62817)
CVE-2026-73072 Vulnerability in Vim (CVE-2026-73072)
CVE-2026-53413 Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which...
CVE-2026-11736 Vulnerability in Netgear Rax20 Firmware (CVE-2026-11736)
CVE-2026-73066 Out-of-Bounds Write in Tesseract (CVE-2026-73066)
CVE-2026-50059 Out-of-Bounds Write in Solid Edge SE2025 (CVE-2026-50059)
CVE-2026-50064 Out-of-Bounds Write in Solid Edge SE2025 (CVE-2026-50064)
CVE-2026-12052 The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in…
CVE-2026-34265 SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical...
CVE-2026-8718 tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS…
CVE-2026-71969 Vulnerability in OP-TEE OS (CVE-2026-71969)
CVE-2026-59091 Out-of-Bounds Write in GIMP's file format plugins (CVE-2026-59091)
CVE-2026-59087 Out-of-Bounds Write in GIMP image manipulation program (CVE-2026-59087)
CVE-2026-19387 A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec...
CVE-2026-15534 Out-of-Bounds Read in Perl (CVE-2026-15534)
CVE-2026-54211 Out-of-Bounds Write in TeamDavid Webbox (CVE-2026-54211)
CVE-2026-54212 Out-of-Bounds Write in TeamDavid Webbox (CVE-2026-54212)
CVE-2026-54210 Out-of-Bounds Write in TeamDavid Webbox (CVE-2026-54210)
CVE-2026-17264 Opening a crafted DICOM file containing malicious JPEG-compressed pixel data triggers an attacker...
CVE-2026-8325 Out-of-Bounds Write in Autodesk (CVE-2026-8325)
CVE-2026-70632 Out-of-Bounds Write in FFmpeg (CVE-2026-70632)
CVE-2026-70628 Vulnerability in FFmpeg (CVE-2026-70628)
CVE-2026-5857 Out-of-Bounds Write in Contiki-NG (CVE-2026-5857)
CVE-2026-43629 Vulnerability in KV cache state restore path (CVE-2026-43629)
CVE-2026-19173 Out-of-Bounds Write in Google Chrome (CVE-2026-19173)
CVE-2026-19162 Out-of-Bounds Write in Google Chrome (CVE-2026-19162)
CVE-2026-19157 Out-of-Bounds Write in Google Chrome (CVE-2026-19157)
CVE-2026-19148 Out-of-Bounds Write in Google Chrome (CVE-2026-19148)
CVE-2026-71263 The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool() (demo...
CVE-2026-71255 Out-of-Bounds Write in nanoMODBUS (CVE-2026-71255)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details