Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 2,172

ID Title
CVE-2024-21378 Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-21379 Microsoft Word Remote Code Execution Vulnerability
CVE-2024-21367 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21368 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21369 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21370 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21372 Windows OLE Remote Code Execution Vulnerability
CVE-2024-21361 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21363 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2024-21365 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21366 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21357 Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2024-21358 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21359 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21360 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21350 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21352 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2024-21347 Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2024-21349 Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
CVE-2024-21339 Windows USB Generic Parent Driver Remote Code Execution Vulnerability
CVE-2024-21341 Windows Kernel Remote Code Execution Vulnerability
CVE-2024-20673 Microsoft Office Remote Code Execution Vulnerability
CVE-2024-20667 Azure DevOps Server Remote Code Execution Vulnerability
CVE-2024-23054 Vulnerability in plone (CVE-2024-23054)
CVE-2024-22899 Code Injection in vinchin (CVE-2024-22899)
CVE-2024-22900 Command Injection in vinchin (CVE-2024-22900)
CVE-2024-22903 Command Injection in vinchin (CVE-2024-22903)
CVE-2024-21399 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-23055 Vulnerability in plone (CVE-2024-23055)
CVE-2023-40547 Out-of-Bounds Write in redhat (CVE-2023-40547)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →