CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,325 vulnerabilities with CWE-787
CVE-2018-3848 HIGH
NASA CFITSIO < 3.490 - Stack-based Buffer Overflow in ffghbn Function
CVSS 8.8
CVE-2018-3846 HIGH
NASA CFITSIO 3.42 - Stack-based Buffer Overflow in ffgphd and ffgtkn Functions
CVSS 8.8
CVE-2018-10120 HIGH
LibreOffice <5.4.6.1-6.0.2.1 - DoS
CVSS 7.8
CVE-2018-3889 HIGH
Photoline - Out-of-bounds Write via PCX Image Processing
CVSS 7.8
CVE-2018-3868 HIGH
PhotoLine - Out-of-bounds Write via TIFF Image Processing
CVSS 7.8
CVE-2018-3862 HIGH
PhotoLine - Out-of-bounds Write via TIFF Image Processing
CVSS 7.8
CVE-2018-3861 HIGH
PhotoLine - Out-of-bounds Write via TIFF Image Processing
CVSS 7.8
CVE-2018-1023 HIGH
ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-1020 HIGH
Internet Explorer 9, 10, 11 - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-1019 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-1018 HIGH
Internet Explorer 11 - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-1004 HIGH
Internet Explorer - Remote Code Execution via VBScript Engine Memory Handling
CVSS 8.8
CVE-2018-1001 HIGH
Internet Explorer 9, 10, 11 - Remote Code Execution via Scripting Engine Memory Corruption
CVSS 7.5
CVE-2018-1000 MEDIUM
Internet Explorer 9, 10, 11 - Information Disclosure via Scripting Engine Memory Handling
CVSS 5.3
CVE-2018-0997 HIGH
Internet Explorer 11 - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-0996 HIGH
Internet Explorer 9, 10, 11 - Remote Code Execution via Scripting Engine Memory Corruption
CVSS 7.5
CVE-2018-0995 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-0994 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-0993 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-0991 HIGH
Internet Explorer 10 and 11 - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-0990 HIGH
Microsoft Edge and ChakraCore - Remote Code Execution via Memory Corruption
CVSS 7.5
CVE-2018-0989 MEDIUM
Internet Explorer 9, 10, 11 - Information Disclosure via Scripting Engine Memory Handling
CVSS 4.3
CVE-2018-0988 HIGH
Internet Explorer 9, 10, 11 - Remote Code Execution via Scripting Engine Memory Corruption
CVSS 7.5
CVE-2018-0981 MEDIUM
Internet Explorer 9, 10, 11 - Information Disclosure via Scripting Engine Memory Handling
CVSS 5.3
CVE-2018-0980 HIGH
Microsoft Edge and ChakraCore < 1.8.3 - Remote Code Execution via Memory Corruption
CVSS 7.5
Details
Vulnerabilities 14,325
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits