Cwe 787

🧬 CWE Related 105
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。

🔖 Related tags

🛡 Vulnerabilities tagged with this 1,015

ID Title
CVE-2021-35269 Out-of-Bounds Write in tuxera (CVE-2021-35269)
CVE-2021-35267 Out-of-Bounds Write in tuxera (CVE-2021-35267)
CVE-2021-35266 Out-of-Bounds Write in c (CVE-2021-35266)
CVE-2021-33485 CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
CVE-2020-21831 Out-of-Bounds Write in c (CVE-2020-21831)
CVE-2020-21842 Out-of-Bounds Write in c (CVE-2020-21842)
CVE-2020-21838 Out-of-Bounds Write in c (CVE-2020-21838)
CVE-2020-21832 Out-of-Bounds Write in c (CVE-2020-21832)
CVE-2020-21830 Out-of-Bounds Write in c (CVE-2020-21830)
CVE-2020-21836 Out-of-Bounds Write in c (CVE-2020-21836)
CVE-2020-21833 Out-of-Bounds Write in c (CVE-2020-21833)
CVE-2020-21841 Out-of-Bounds Write in c (CVE-2020-21841)
CVE-2021-21974 Out-of-Bounds Write in vmware (CVE-2021-21974)
CVE-2020-24175 Out-of-Bounds Write in yz1 (CVE-2020-24175)
CVE-2020-16918 Out-of-Bounds Write in microsoft (CVE-2020-16918)
CVE-2021-30883 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2021-30883)
CVE-2020-1027 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2020-1027)
CVE-2019-7286 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2019-7286)
CVE-2019-7287 KEV [KEV] Out-of-Bounds Write in Apple ios (CVE-2019-7287)
CVE-2018-5002 KEV [KEV] Out-of-Bounds Write in Adobe flash-player (CVE-2018-5002)
CVE-2022-29641 Out-of-Bounds Write in dos (CVE-2022-29641)
CVE-2022-26987 Out-of-Bounds Write in tp-link (CVE-2022-26987)
CVE-2022-26988 Out-of-Bounds Write in tp-link (CVE-2022-26988)
CVE-2022-24521 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-24521)
CVE-2021-39793 KEV [KEV] Out-of-Bounds Write in Google pixel (CVE-2021-39793)
CVE-2018-8373 KEV [KEV] Out-of-Bounds Write in Microsoft internet-explorer-scripting-engine (CVE-2018-8373)
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2019-16928 KEV [KEV] Out-of-Bounds Write in exim (CVE-2019-16928)
CVE-2015-3043 KEV [KEV] Out-of-Bounds Write in Adobe flash-player (CVE-2015-3043)
CVE-2013-0640 KEV [KEV] Out-of-Bounds Write in Adobe reader-and-acrobat (CVE-2013-0640)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →