Cwe 20

🧬 CWE Related 125
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 1,690

ID Title
CVE-2026-11675 Vulnerability in CVE-2026-11675 (CVE-2026-11675)
CVE-2026-11666 Vulnerability in google (CVE-2026-11666)
CVE-2026-11660 Vulnerability in google (CVE-2026-11660)
CVE-2026-11659 Vulnerability in google (CVE-2026-11659)
CVE-2026-11653 Vulnerability in google (CVE-2026-11653)
CVE-2026-11658 Vulnerability in google (CVE-2026-11658)
CVE-2026-49234 Vulnerability in routinator (CVE-2026-49234)
CVE-2026-47430 Vulnerability in cordova-plugin-inappbrowser (CVE-2026-47430)
CVE-2026-11460 Vulnerability in CVE-2026-11460 (CVE-2026-11460)
CVE-2026-45291 Vulnerability in CVE-2026-45291 (CVE-2026-45291)
CVE-2026-36501 Vulnerability in dos (CVE-2026-36501)
CVE-2026-8714 Vulnerability in tp-link (CVE-2026-8714)
CVE-2025-5090 Vulnerability in dos (CVE-2025-5090)
CVE-2025-5089 Vulnerability in dos (CVE-2025-5089)
CVE-2026-11297 Vulnerability in google (CVE-2026-11297)
CVE-2026-11286 Vulnerability in google (CVE-2026-11286)
CVE-2026-11287 Vulnerability in google (CVE-2026-11287)
CVE-2026-11283 Vulnerability in google (CVE-2026-11283)
CVE-2026-11280 Vulnerability in google (CVE-2026-11280)
CVE-2026-11273 Vulnerability in google (CVE-2026-11273)
CVE-2026-11272 Vulnerability in privilege-escalation (CVE-2026-11272)
CVE-2026-11261 Vulnerability in google (CVE-2026-11261)
CVE-2026-11255 Vulnerability in google (CVE-2026-11255)
CVE-2026-11259 Vulnerability in google (CVE-2026-11259)
CVE-2026-11251 Vulnerability in google (CVE-2026-11251)
CVE-2026-11246 Vulnerability in google (CVE-2026-11246)
CVE-2026-11244 Vulnerability in google (CVE-2026-11244)
CVE-2026-11242 Vulnerability in google (CVE-2026-11242)
CVE-2026-11241 Vulnerability in privilege-escalation (CVE-2026-11241)
CVE-2026-11239 Vulnerability in privilege-escalation (CVE-2026-11239)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →