Cwe 787

🧬 CWE Related 105
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。

🔖 Related tags

🛡 Vulnerabilities tagged with this 1,733

ID Title
CVE-2020-21833 Out-of-Bounds Write in c (CVE-2020-21833)
CVE-2020-21841 Out-of-Bounds Write in c (CVE-2020-21841)
CVE-2021-27365 Out-of-Bounds Write in netapp (CVE-2021-27365)
CVE-2021-21974 Out-of-Bounds Write in vmware (CVE-2021-21974)
CVE-2020-24175 Out-of-Bounds Write in yz1 (CVE-2020-24175)
CVE-2020-16918 Out-of-Bounds Write in microsoft (CVE-2020-16918)
CVE-2021-30883 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2021-30883)
CVE-2020-1027 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2020-1027)
CVE-2019-7286 KEV [KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2019-7286)
CVE-2019-7287 KEV [KEV] Out-of-Bounds Write in Apple ios (CVE-2019-7287)
CVE-2018-5002 KEV [KEV] Out-of-Bounds Write in Adobe flash-player (CVE-2018-5002)
CVE-2022-29641 Out-of-Bounds Write in dos (CVE-2022-29641)
CVE-2022-26987 Out-of-Bounds Write in tp-link (CVE-2022-26987)
CVE-2022-26988 Out-of-Bounds Write in tp-link (CVE-2022-26988)
CVE-2022-24521 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2022-24521)
CVE-2021-39793 KEV [KEV] Out-of-Bounds Write in Google pixel (CVE-2021-39793)
CVE-2018-25032 Out-of-Bounds Write in nokogiri (CVE-2018-25032)
CVE-2018-8373 KEV [KEV] Out-of-Bounds Write in Microsoft internet-explorer-scripting-engine (CVE-2018-8373)
CVE-2022-24457 HEIF Image Extensions Remote Code Execution Vulnerability
CVE-2019-16928 KEV [KEV] Out-of-Bounds Write in exim (CVE-2019-16928)
CVE-2015-3043 KEV [KEV] Out-of-Bounds Write in Adobe flash-player (CVE-2015-3043)
CVE-2013-0640 KEV [KEV] Out-of-Bounds Write in Adobe reader-and-acrobat (CVE-2013-0640)
CVE-2021-4090 Out-of-Bounds Write in c (CVE-2021-4090)
CVE-2022-22899 Out-of-Bounds Write in dos (CVE-2022-22899)
CVE-2018-8174 KEV [KEV] Out-of-Bounds Write in Microsoft windows (CVE-2018-8174)
CVE-2021-22788 Out-of-Bounds Write in dos (CVE-2021-22788)
CVE-2022-21882 KEV [KEV] Out-of-Bounds Write in Microsoft win32k (CVE-2022-21882)
CVE-2021-42059 Out-of-Bounds Write in insyde (CVE-2021-42059)
CVE-2021-42554 Out-of-Bounds Write in insyde (CVE-2021-42554)
CVE-2021-43615 Out-of-Bounds Write in insyde (CVE-2021-43615)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →