Cwe 20

🧬 CWE Related 125
slug: cwe-20

Explanation

CWE-20は「ユーザーから受け取ったデータが、想定された形式・範囲・型かをきちんとチェックせずに使ってしまう欠陥」のことです。 非常に広い概念で、SQLi・XSS・コマンドインジェクションなど多くの攻撃の前段階となります。 「入力は信用するな (Trust Boundaries の概念)」がセキュリティ設計の基本原則です。
📌 Example
多くのCISA KEV登録CVEがこのCWEに分類されており、2024年だけで100件以上の悪用事例があります。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,280

ID Title
CVE-2026-13939 Vulnerability in google (CVE-2026-13939)
CVE-2026-13942 Vulnerability in google (CVE-2026-13942)
CVE-2026-13934 Vulnerability in google (CVE-2026-13934)
CVE-2026-13927 Vulnerability in privilege-escalation (CVE-2026-13927)
CVE-2026-13926 Vulnerability in google (CVE-2026-13926)
CVE-2026-13925 Vulnerability in google (CVE-2026-13925)
CVE-2026-13920 Vulnerability in google (CVE-2026-13920)
CVE-2026-13917 Vulnerability in google (CVE-2026-13917)
CVE-2026-13908 Vulnerability in google (CVE-2026-13908)
CVE-2026-13911 Vulnerability in google (CVE-2026-13911)
CVE-2026-13924 Vulnerability in google (CVE-2026-13924)
CVE-2026-13928 Vulnerability in privilege-escalation (CVE-2026-13928)
CVE-2026-13921 Vulnerability in google (CVE-2026-13921)
CVE-2026-13889 Vulnerability in google (CVE-2026-13889)
CVE-2026-13872 Vulnerability in google (CVE-2026-13872)
CVE-2026-13901 Vulnerability in google (CVE-2026-13901)
CVE-2026-13900 Vulnerability in google (CVE-2026-13900)
CVE-2026-13875 Vulnerability in google (CVE-2026-13875)
CVE-2026-13893 Vulnerability in google (CVE-2026-13893)
CVE-2026-13877 Vulnerability in google (CVE-2026-13877)
CVE-2026-13891 Vulnerability in privilege-escalation (CVE-2026-13891)
CVE-2026-13863 Vulnerability in privilege-escalation (CVE-2026-13863)
CVE-2026-13852 Vulnerability in google (CVE-2026-13852)
CVE-2026-13847 Vulnerability in google (CVE-2026-13847)
CVE-2026-13843 Vulnerability in google (CVE-2026-13843)
CVE-2026-13834 Vulnerability in google (CVE-2026-13834)
CVE-2026-13850 Vulnerability in c (CVE-2026-13850)
CVE-2026-13865 Vulnerability in google (CVE-2026-13865)
CVE-2026-13849 Vulnerability in google (CVE-2026-13849)
CVE-2026-13851 Vulnerability in google (CVE-2026-13851)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →