CWE-123 · 53 records

Write-what-where Condition

CVEs in this class

53 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
63This week	CVE-2026-43284Weaponized	xfrm: esp: avoid in-place decrypt on shared skb fragslinux · linux kernel · CWE-123	High8.8	—	94.1%	May 8, 2026
41Plan	CVE-2015-8271No exploit	The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.rtmpdump project · rtmpdump · CWE-123 pre-auth RCE	Critical9.8	—	5.9%	Apr 13, 2017
40Plan	CVE-2014-5435No exploit	An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6honeywell · experion process knowledge system · CWE-123 pre-auth RCE	Critical9.8	—	3.4%	Apr 8, 2019
40Plan	CVE-2024-42479No exploit	llama.cpp allows write-what-where in rpc_server::set_tensorggml · llama.cpp · CWE-123 Pre-auth	Critical9.8	—	2.6%	Aug 12, 2024
40Plan	CVE-2021-38441No exploit	Eclipse CycloneDDS Write-what-where Conditioneclipse · cyclonedds · CWE-123 Pre-auth	Critical9.8	—	2.1%	May 5, 2022
39Monitor	CVE-2022-38143No exploit	A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images.openimageio · openimageio · CWE-123 pre-auth RCE	Critical9.8	—	1.5%	Dec 22, 2022
39Monitor	CVE-2020-2001No exploit	PAN-OS: Panorama External control of file vulnerability leads to privilege escalationpaloaltonetworks · pan-os · CWE-123 Pre-auth	Critical9.8	—	1.3%	May 13, 2020
39Monitor	CVE-2021-38449No exploit	Some API functions permit by-design writing or copying data into a given buffer.auvesy · versiondog · CWE-123 Pre-auth	Critical9.8	—	1.2%	Oct 22, 2021
39Monitor	CVE-2025-69809No exploit	A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling ap2r3 · bareiron · CWE-123 pre-auth RCE	Critical9.8	—	0.5%	Mar 16, 2026
36Monitor	CVE-2025-55298No exploit	ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code executionimagemagick · imagemagick · CWE-123 RCE	High8.8	—	4.6%	Aug 26, 2025
36Monitor	CVE-2022-1523No exploit	Fuji Electric D300win Write-what-where conditionfujielectric · d300win · CWE-123 Pre-auth	Critical9.1	—	0.5%	Oct 19, 2022
36Monitor	CVE-2026-30121No exploit	remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.remotion · remotion · CWE-123 Pre-auth	Critical9.1	—	0.3%	Jun 15, 2026
35Monitor	CVE-2021-42540No exploit	Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-123	High8.8	—	1.0%	Oct 22, 2021
35Monitor	CVE-2025-9900No exploit	Libtiff: libtiff write-what-wherered hat · red hat enterprise linux 10 · CWE-123 pre-auth RCE	High8.8	—	0.9%	Sep 23, 2025
35Monitor	CVE-2022-37904No exploit	Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequenarubanetworks · sd-wan · CWE-123 RCE	High8.8	—	0.7%	Dec 12, 2022
35Monitor	CVE-2022-41757No exploit	An issue was discovered in the Arm Mali GPU Kernel Driver.arm · valhall gpu kernel driver · CWE-123	High8.8	—	0.7%	Nov 8, 2022
35Monitor	CVE-2026-81579No exploit	An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windowswibu-systems-ag · wibukey · CWE-123 RCE Local privilege escalation	High8.8	—	0.1%	Aug 27, 2026
35Monitor	CVE-2026-92372No exploit	Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Executionteamviewer · full client · CWE-123 pre-auth RCE	High8.8	—	—	1 day ago
34Monitor	CVE-2020-7560No exploit	A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStschneider-electric · ecostruxure control expert · CWE-123	High8.6	—	1.4%	Dec 10, 2020
32Monitor	CVE-2020-16225No exploit	Delta Electronics TPEditor Versions 1.97 and prior.deltaww · tpeditor · CWE-123 RCE	High7.8	—	2.0%	Aug 6, 2020
32Monitor	CVE-2024-2607No exploit	Return registers were overwritten which could have allowed an attacker to execute arbitrary code.mozilla · firefox · CWE-123 pre-auth RCE	High8.1	—	1.1%	Mar 19, 2024
32Monitor	CVE-2024-36877Proof of concept	Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7CWE-123	High8.2	—	0.6%	Aug 12, 2024
32Monitor	CVE-2025-3052Proof of concept	An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.dt research · biosflashshell · CWE-123	High8.2	—	0.4%	Jun 10, 2025
32Monitor	CVE-2022-35408No exploit	An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.insyde · insydeh2o · CWE-123 RCE Local privilege escalation	High8.2	—	0.3%	Sep 22, 2022
32Monitor	CVE-2022-40262No exploit	The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.ami · aptio v · CWE-123 RCE	High8.2	—	0.3%	Sep 20, 2022

CVE-2026-43284
63This week
xfrm: esp: avoid in-place decrypt on shared skb frags
HighCVSS 8.8WeaponizedEPSS 94%
linux · linux kernelMay 8, 2026
CVE-2015-8271
41Plan
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
CriticalCVSS 9.8No exploitEPSS 5%
- pre-auth RCE
rtmpdump project · rtmpdumpApr 13, 2017
CVE-2014-5435
40Plan
An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
honeywell · experion process knowledge systemApr 8, 2019
CVE-2024-42479
40Plan
llama.cpp allows write-what-where in rpc_server::set_tensor
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
ggml · llama.cppAug 12, 2024
CVE-2021-38441
40Plan
Eclipse CycloneDDS Write-what-where Condition
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
eclipse · cycloneddsMay 5, 2022
CVE-2022-38143
39Monitor
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
openimageio · openimageioDec 22, 2022
CVE-2020-2001
39Monitor
PAN-OS: Panorama External control of file vulnerability leads to privilege escalation
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
paloaltonetworks · pan-osMay 13, 2020
CVE-2021-38449
39Monitor
Some API functions permit by-design writing or copying data into a given buffer.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
auvesy · versiondogOct 22, 2021
CVE-2025-69809
39Monitor
A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling a
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
p2r3 · bareironMar 16, 2026
CVE-2025-55298
36Monitor
ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
HighCVSS 8.8No exploitEPSS 4%
- RCE
imagemagick · imagemagickAug 26, 2025
CVE-2022-1523
36Monitor
Fuji Electric D300win Write-what-where condition
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
fujielectric · d300winOct 19, 2022
CVE-2026-30121
36Monitor
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
remotion · remotionJun 15, 2026
CVE-2021-42540
35Monitor
Emerson WirelessHART Gateway
HighCVSS 8.8No exploitEPSS 1%
emerson · wireless 1410 gateway firmwareOct 22, 2021
CVE-2025-9900
35Monitor
Libtiff: libtiff write-what-where
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
red hat · red hat enterprise linux 10Sep 23, 2025
CVE-2022-37904
35Monitor
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequen
HighCVSS 8.8No exploitEPSS 0%
- RCE
arubanetworks · sd-wanDec 12, 2022
CVE-2022-41757
35Monitor
An issue was discovered in the Arm Mali GPU Kernel Driver.
HighCVSS 8.8No exploitEPSS 0%
arm · valhall gpu kernel driverNov 8, 2022
CVE-2026-81579
35Monitor
An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
wibu-systems-ag · wibukeyAug 27, 2026
CVE-2026-92372
35Monitor
Out-of-bounds Write in TeamViewer Full Client for Linux and macOS Allows Remote Code Execution
HighCVSS 8.8No exploit
- pre-auth RCE
teamviewer · full client1 day ago
CVE-2020-7560
34Monitor
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoSt
HighCVSS 8.6No exploitEPSS 1%
schneider-electric · ecostruxure control expertDec 10, 2020
CVE-2020-16225
32Monitor
Delta Electronics TPEditor Versions 1.97 and prior.
HighCVSS 7.8No exploitEPSS 2%
- RCE
deltaww · tpeditorAug 6, 2020
CVE-2024-2607
32Monitor
Return registers were overwritten which could have allowed an attacker to execute arbitrary code.
HighCVSS 8.1No exploitEPSS 1%
- pre-auth RCE
mozilla · firefoxMar 19, 2024
CVE-2024-36877
32Monitor
Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7
HighCVSS 8.2Proof of conceptEPSS 0%
Aug 12, 2024
CVE-2025-3052
32Monitor
An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.
HighCVSS 8.2Proof of conceptEPSS 0%
dt research · biosflashshellJun 10, 2025
CVE-2022-35408
32Monitor
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
HighCVSS 8.2No exploitEPSS 0%
- RCE
- Local privilege escalation
insyde · insydeh2oSep 22, 2022
CVE-2022-40262
32Monitor
The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.
HighCVSS 8.2No exploitEPSS 0%
- RCE
ami · aptio vSep 20, 2022

All vulnerability classes