CWE-787 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-787 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2025-22457A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure…100.0%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2025-0282A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure…100.0%심각9.0● 실제 악용이 확인됨CVE-2023-4863Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a…100.0%높음8.8● 랜섬웨어 캠페인에 사용됨CVE-2021-20038A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environme…99.9%심각9.8● 실제 악용이 확인됨CVE-2015-3113Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0…99.8%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2019-11043In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurati…99.8%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2022-42475A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 t…99.5%심각9.8● 실제 악용이 확인됨CVE-2018-0171A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could a…99.5%심각9.8
전체 목록
120건
CVE-2023-34048악용 확인vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol. A m…99.4%심각9.8
CVE-2008-2992랜섬웨어 악용Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute a…98.5%높음7.8
CVE-2019-5544랜섬웨어 악용OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the s…97.3%심각9.8
CVE-2015-1641악용 확인Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, O…96.7%높음7.8
CVE-2018-0798악용 확인Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2…95.1%높음8.8
CVE-2021-4034랜섬웨어 악용A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a s…94.3%높음7.8
CVE-2016-0189랜섬웨어 악용The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 …94.1%높음7.5
CVE-2018-0802랜섬웨어 악용Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2…93.3%높음7.8
CVE-2025-9242악용 확인An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthentic…91.3%심각9.3
CVE-2021-35211랜섬웨어 악용Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a …91.2%심각10.0
CVE-2012-0754악용 확인Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; be…91.1%높음8.1
CVE-2010-3333악용 확인Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office …89.5%높음7.8
CVE-2011-2462악용 확인Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and M…88.9%심각9.8
CVE-2018-8174랜섬웨어 악용A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, ak…88.3%높음7.5
CVE-2021-31755악용 확인An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow v…86.9%심각9.8
CVE-2013-0640악용 확인Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers …86.9%높음7.8
CVE-2021-21017악용 확인Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30…86.3%높음8.8
CVE-2023-27997랜섬웨어 악용A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and be…85.7%심각9.8
CVE-2009-3129악용 확인Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File F…84.0%높음7.8
CVE-2012-1889악용 확인Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remot…83.5%높음8.8
CVE-2024-21762랜섬웨어 악용A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0…83.4%심각9.8
CVE-2009-3953악용 확인The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and…83.2%높음8.8
CVE-2016-7200악용 확인The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or …82.8%높음8.8
CVE-2010-1297악용 확인Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader…82.5%높음7.8
CVE-2010-2883악용 확인Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 o…81.4%높음7.3
CVE-2020-14871악용 확인Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Su…80.2%심각10.0
CVE-2013-3346악용 확인Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to exec…78.9%심각9.8
CVE-2021-22555악용 확인A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This …78.7%높음7.8
CVE-2014-1761악용 확인Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack…77.5%높음7.8
CVE-2019-1429악용 확인A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…77.3%높음7.5
CVE-2021-38406악용 확인Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when pars…76.4%높음7.8
CVE-2015-3043악용 확인Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11…73.9%심각9.8
CVE-2013-3918악용 확인The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Wind…73.7%높음8.8
CVE-2017-8540악용 확인The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Win…71.9%높음7.8
CVE-2010-4344악용 확인Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attack…71.7%심각9.8
CVE-2013-3163악용 확인Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial o…70.7%높음8.8
CVE-2022-2294랜섬웨어 악용Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potential…70.5%높음8.8
CVE-2021-21220악용 확인Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote atta…70.4%높음8.8
CVE-2020-0938악용 확인A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library …69.0%높음7.8
CVE-2016-4657악용 확인WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of servic…66.8%높음8.8
CVE-2020-1020악용 확인A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library …65.0%높음8.8
CVE-2020-15999악용 확인Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentia…63.9%심각9.6
CVE-2023-4911악용 확인A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABL…63.8%높음7.8
CVE-2021-30632악용 확인Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially expl…63.2%높음8.8
CVE-2009-0563악용 확인Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Offic…62.8%높음7.8
CVE-2018-8373악용 확인A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…61.9%높음7.5
CVE-2019-5825악용 확인Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentia…55.9%보통6.5
CVE-2024-38812악용 확인The vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A mali…54.6%심각9.8
CVE-2020-1054악용 확인An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properl…54.2%높음7.0
CVE-2015-2419악용 확인JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause …53.1%높음8.8
CVE-2015-1642악용 확인Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a craf…53.1%높음7.8
CVE-2012-2539악용 확인Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; a…53.0%높음7.8
CVE-2019-1367랜섬웨어 악용A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…52.4%높음7.5
CVE-2015-2502악용 확인Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial o…51.0%높음8.8
CVE-2023-5217악용 확인Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allo…49.0%높음8.8
CVE-2023-28252랜섬웨어 악용Windows Common Log File System Driver Elevation of Privilege Vulnerability49.0%높음7.8
CVE-2014-4404악용 확인Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to exec…48.9%높음7.8
CVE-2020-16009악용 확인Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potent…48.3%높음8.8
CVE-2015-2425악용 확인Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service …44.7%높음8.8
CVE-2019-16928악용 확인Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is…41.6%심각9.8
CVE-2015-2424악용 확인Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 20…40.4%높음8.8
CVE-2020-5735악용 확인Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remo…36.2%높음8.8
CVE-2018-17480악용 확인Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in …35.6%높음8.8
CVE-2015-2387악용 확인ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windo…34.9%높음7.8
CVE-2016-5198악용 확인V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Window…34.2%높음8.8
CVE-2018-13383랜섬웨어 악용A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.…33.6%보통6.5
CVE-2025-21042악용 확인Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execu…33.2%심각9.8
CVE-2025-43300악용 확인An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 an…32.5%심각10.0
CVE-2022-4135악용 확인Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had comprom…31.9%심각9.6
CVE-2026-0300악용 확인A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alt…31.7%심각9.3
CVE-2020-0968랜섬웨어 악용A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…30.7%높음7.5
CVE-2019-3568악용 확인A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted ser…30.1%심각9.8
CVE-2025-32756악용 확인A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.…29.8%심각9.8
CVE-2017-0222악용 확인A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka…29.6%높음8.8
CVE-2018-8653악용 확인A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…29.6%높음7.5
CVE-2017-0149악용 확인Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of…29.2%높음8.8
CVE-2021-30807악용 확인A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11…28.8%높음7.8
CVE-2022-37969랜섬웨어 악용Windows Common Log File System Driver Elevation of Privilege Vulnerability28.3%높음7.8
CVE-2025-27363악용 확인An out of bounds write exists in FreeType versions 2.13.0 and below (newer versions of FreeType are not vulner…27.8%높음8.1
CVE-2025-14733랜섬웨어 악용An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthentic…26.5%심각9.3
CVE-2018-5002악용 확인Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successfu…25.1%높음7.8
CVE-2020-1380악용 확인A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in…24.2%높음7.8
CVE-2016-4656악용 확인The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cau…23.6%높음7.8
CVE-2023-28206악용 확인An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monter…23.2%높음8.6
CVE-2023-32435악용 확인A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 1…23.0%높음8.8
CVE-2024-37079악용 확인vCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC protocol. A maliciou…22.4%심각9.8
CVE-2025-14174악용 확인Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker…22.3%높음8.8
CVE-2020-27930악용 확인A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 1…22.0%높음7.8
CVE-2009-1862악용 확인Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.…21.2%높음7.8
CVE-2021-21148악용 확인Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially ex…20.0%높음8.8
CVE-2024-7965악용 확인Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potent…18.5%높음8.8
CVE-2023-36036악용 확인Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability16.7%높음7.8
CVE-2020-0986악용 확인An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in mem…16.3%높음7.8
CVE-2019-7286악용 확인A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, mac…15.9%높음7.8
CVE-2020-3837악용 확인A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…14.8%높음7.8
CVE-2021-30883악용 확인A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and i…14.7%높음7.8
CVE-2022-22675악용 확인An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, wa…12.5%높음7.8
CVE-2020-3118악용 확인A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauth…11.7%높음8.8
CVE-2022-22587악용 확인A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 15.3 and iP…11.6%심각9.8
CVE-2024-4761악용 확인Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out…11.0%높음8.8
CVE-2023-23376랜섬웨어 악용Windows Common Log File System Driver Elevation of Privilege Vulnerability10.9%높음7.8
CVE-2021-30761악용 확인A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 12.5.4. Pro…10.5%높음8.8
CVE-2022-32893악용 확인An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 an…9.9%높음8.8
CVE-2022-20701악용 확인Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an …9.7%높음7.8
CVE-2023-42917악용 확인A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and i…9.3%높음8.8
CVE-2022-0995악용 확인An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsys…8.8%높음7.8
CVE-2010-4398악용 확인Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 a…8.7%높음7.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.