Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 105
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 20125 Cwe 78120 Cwe 41699 Cwe 2296 Cwe 11990 Cwe 9484 Cwe 50270 Cwe 7966 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 1,733

ID Title
CVE-2023-24132 Out-of-Bounds Write in heimgardtechnologies (CVE-2023-24132)
CVE-2023-24129 Out-of-Bounds Write in heimgardtechnologies (CVE-2023-24129)
CVE-2023-24130 Out-of-Bounds Write in heimgardtechnologies (CVE-2023-24130)
CVE-2023-24128 Out-of-Bounds Write in heimgardtechnologies (CVE-2023-24128)
CVE-2023-23376 KEV [KEV] Vulnerability in Microsoft windows (CVE-2023-23376)
CVE-2022-31902 Notepad++ v8.4.1 was discovered to contain a stack overflow via the component Finder::add().
CVE-2022-3775 Out-of-Bounds Write in gnu (CVE-2022-3775)
CVE-2022-46393 Out-of-Bounds Read in arm (CVE-2022-46393)
CVE-2022-2601 Vulnerability in gnu (CVE-2022-2601)
CVE-2022-37325 Out-of-Bounds Write in c (CVE-2022-37325)
CVE-2022-4135 KEV [KEV] Out-of-Bounds Write in Google chromium-gpu (CVE-2022-4135)
CVE-2022-44194 Out-of-Bounds Write in netgear (CVE-2022-44194)
CVE-2022-20946 Vulnerability in dos (CVE-2022-20946)
CVE-2022-41073 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41073)
CVE-2022-41125 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41125)
CVE-2022-41128 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-41128)
CVE-2022-42827 KEV [KEV] Vulnerability in Apple ios-and-ipados (CVE-2022-42827)
CVE-2022-41415 Out-of-Bounds Write in dos (CVE-2022-41415)
CVE-2022-2347 Vulnerability in denx (CVE-2022-2347)
CVE-2022-30426 Out-of-Bounds Write in acer (CVE-2022-30426)
CVE-2022-37969 KEV [KEV] Vulnerability in Microsoft windows (CVE-2022-37969)
CVE-2022-32917 KEV [KEV] Vulnerability in Apple ios (CVE-2022-32917)
CVE-2022-38555 Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.
CVE-2022-2294 KEV [KEV] Out-of-Bounds Write in Webrtc google (CVE-2022-2294)
CVE-2021-38406 KEV [KEV] Out-of-Bounds Write in Delta electronics delta-electronics (CVE-2021-38406)
CVE-2021-4040 Vulnerability in redhat (CVE-2021-4040)
CVE-2022-36233 Out-of-Bounds Write in tendacn (CVE-2022-36233)
CVE-2022-32894 KEV [KEV] Vulnerability in Apple ios-and-macos (CVE-2022-32894)
CVE-2022-32893 KEV [KEV] Vulnerability in Apple ios-and-macos (CVE-2022-32893)
CVE-2022-37434 Out-of-Bounds Write in c (CVE-2022-37434)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →