Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 2,517
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 782021 Cwe 941870 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 2,520

Image ID Title
CVE-2026-47537 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an…
CVE-2026-47532 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker…
CVE-2026-47529 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an…
CVE-2026-47530 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker…
CVE-2026-47523 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker…
CVE-2026-47511 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could…
CVE-2026-47509 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could…
CVE-2026-47503 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM…
CVE-2026-47501 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an…
CVE-2026-47498 NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause…
CVE-2026-47496 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM…
CVE-2026-47495 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user…
CVE-2026-92867 An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal…
CVE-2026-92869 An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal…
CVE-2026-103111 PCRE2 before 10.49, when there is an attacker-controlled regular expression and certain JIT API usage, allows an…
CVE-2026-103110 Out-of-Bounds Write in Pexip (CVE-2026-103110)
CVE-2026-103109 Out-of-Bounds Write in Pexip (CVE-2026-103109)
CVE-2026-81433 A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) allows an…
CVE-2026-74225 U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID…
CVE-2026-71974 U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to…
CVE-2026-71971 U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the…
CVE-2026-71972 U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in…
CVE-2026-102301 Out-of-Bounds Write in Google Chrome (CVE-2026-102301)
CVE-2026-95357 Out-of-Bounds Write in Google Chrome (CVE-2026-95357)
CVE-2026-95331 Out-of-Bounds Write in Google Chrome (CVE-2026-95331)
CVE-2026-95329 Out-of-Bounds Write in Google Chrome (CVE-2026-95329)
CVE-2026-95322 Out-of-Bounds Write in Google Chrome (CVE-2026-95322)
CVE-2026-95304 Out-of-Bounds Write in Google Chrome (CVE-2026-95304)
CVE-2026-102761 NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a…
CVE-2026-102729 `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details