Sign in Sign up
JA · EN · FR
SecPulse

Cwe 787

🧬 CWE Related 105
slug: cwe-787

Explanation

CWE-787はCWE-119の中でも特に「メモリの確保された範囲外に書き込んでしまう」欠陥です。 書き込みできるとプログラムを完全に乗っ取れる (任意コード実行) ことが多く、CVSSスコアが極めて高くなりがちです。 MITREの「危険な脆弱性Top 25」で常に上位を占めています。
📌 Example
CVE-2024-30088 (Windows Kernel): Windowsカーネルの境界外書き込みで、攻撃者がローカル権限昇格を達成できた。CISA KEV入り。
🔗 Related links

🔖 Related tags

Cwe 20125 Cwe 78120 Cwe 41699 Cwe 2296 Cwe 11990 Cwe 9484 Cwe 50270 Cwe 7966 Cwe 8954 Cwe 91844 Cwe 28443 Cwe 28741 Cwe 7740 Cwe 30638 Cwe 84337

🛡 Vulnerabilities tagged with this 1,011

ID Title
CVE-2026-10999 Out-of-Bounds Read in google (CVE-2026-10999)
CVE-2026-10941 Out-of-Bounds Read in google (CVE-2026-10941)
CVE-2026-10925 Out-of-Bounds Write in google (CVE-2026-10925)
CVE-2026-10907 Out-of-Bounds Write in google (CVE-2026-10907)
CVE-2026-10897 Out-of-Bounds Write in google (CVE-2026-10897)
CVE-2026-10892 Out-of-Bounds Write in google (CVE-2026-10892)
CVE-2026-10883 Out-of-Bounds Write in google (CVE-2026-10883)
CVE-2026-10881 Out-of-Bounds Read in Google chrome (CVE-2026-10881)
CVE-2026-5066 Out-of-Bounds Write in c (CVE-2026-5066)
CVE-2026-5589 Out-of-Bounds Write in c (CVE-2026-5589)
CVE-2026-48040 Out-of-Bounds Read in io.netty.incubator:netty-incubator-codec-ohttp-hpke-native-boringssl (CVE-2026-48040)
CVE-2026-8916 Out-of-Bounds Write in CVE-2026-8916 (CVE-2026-8916)
CVE-2026-46253 Out-of-Bounds Write in linux (CVE-2026-46253)
CVE-2026-10718 Out-of-Bounds Write in CVE-2026-10718 (CVE-2026-10718)
CVE-2026-10719 Out-of-Bounds Write in CVE-2026-10719 (CVE-2026-10719)
CVE-2026-10717 Out-of-Bounds Write in CVE-2026-10717 (CVE-2026-10717)
CVE-2021-4478 Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of...
CVE-2026-10046 Out-of-Bounds Write in c (CVE-2026-10046)
CVE-2026-10047 Out-of-Bounds Write in c (CVE-2026-10047)
CVE-2025-59605 Out-of-Bounds Write in qualcomm (CVE-2025-59605)
CVE-2025-59614 Out-of-Bounds Write in qualcomm (CVE-2025-59614)
CVE-2025-59611 Memory corruption in diagnostic services due to absence of input validation
CVE-2026-25259 Memory corruption while processing multiple IOCTL command for escape operations.
CVE-2026-20455 Out-of-Bounds Write in mediatek (CVE-2026-20455)
CVE-2026-20456 Out-of-Bounds Write in dos (CVE-2026-20456)
CVE-2026-20453 Out-of-Bounds Write in mediatek (CVE-2026-20453)
CVE-2026-10114 Buffer Overflow in c (CVE-2026-10114)
CVE-2026-45700 Out-of-Bounds Write in c (CVE-2026-45700)
CVE-2026-44421 FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.26.0, a malicious RDP server can trigger a heap-buffer-overflow write in the FreeRDP client by sending crafted RDPGFX PDUs....
CVE-2026-46690 Out-of-Bounds Read in unbounded-spsc (CVE-2026-46690)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →