CWE-123 · 52 kayıt
Write-what-where Condition
Bu sınıftaki CVE’ler
52 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2015-8271İstismar yok | The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.rtmpdump project · rtmpdump · CWE-123 | Kritik9,8 | — | %5,9 | 13 Nis 2017 |
40Planlayın | CVE-2014-5435İstismar yok | An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6honeywell · experion process knowledge system · CWE-123 | Kritik9,8 | — | %3,5 | 8 Nis 2019 |
40Planlayın | CVE-2024-42479İstismar yok | llama.cpp allows write-what-where in rpc_server::set_tensorggml · llama.cpp · CWE-123 | Kritik9,8 | — | %2,6 | 12 Ağu 2024 |
40Planlayın | CVE-2021-38441İstismar yok | Eclipse CycloneDDS Write-what-where Conditioneclipse · cyclonedds · CWE-123 | Kritik9,8 | — | %2,1 | 5 May 2022 |
39İzleyin | CVE-2022-38143İstismar yok | A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images.openimageio · openimageio · CWE-123 | Kritik9,8 | — | %1,5 | 22 Ara 2022 |
39İzleyin | CVE-2020-2001İstismar yok | PAN-OS: Panorama External control of file vulnerability leads to privilege escalationpaloaltonetworks · pan-os · CWE-123 | Kritik9,8 | — | %1,4 | 13 May 2020 |
39İzleyin | CVE-2021-38449İstismar yok | Some API functions permit by-design writing or copying data into a given buffer.auvesy · versiondog · CWE-123 | Kritik9,8 | — | %1,3 | 22 Eki 2021 |
39İzleyin | CVE-2025-69809İstismar yok | A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling ap2r3 · bareiron · CWE-123 | Kritik9,8 | — | %0,5 | 16 Mar 2026 |
36İzleyin | CVE-2025-55298İstismar yok | ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code executionimagemagick · imagemagick · CWE-123 | Yüksek8,8 | — | %4,5 | 26 Ağu 2025 |
36İzleyin | CVE-2026-43284Silahlaştırılmış | xfrm: esp: avoid in-place decrypt on shared skb fragslinux · linux kernel · CWE-123 | Yüksek8,8 | — | %2,5 | 8 May 2026 |
36İzleyin | CVE-2022-1523İstismar yok | Fuji Electric D300win Write-what-where conditionfujielectric · d300win · CWE-123 | Kritik9,1 | — | %0,5 | 19 Eki 2022 |
36İzleyin | CVE-2026-30121İstismar yok | remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.remotion · remotion · CWE-123 | Kritik9,1 | — | %0,5 | 15 Haz 2026 |
35İzleyin | CVE-2021-42540İstismar yok | Emerson WirelessHART Gatewayemerson · wireless 1410 gateway firmware · CWE-123 | Yüksek8,8 | — | %1,0 | 22 Eki 2021 |
35İzleyin | CVE-2025-9900İstismar yok | Libtiff: libtiff write-what-wherered hat · red hat enterprise linux 10 · CWE-123 | Yüksek8,8 | — | %1,0 | 23 Eyl 2025 |
35İzleyin | CVE-2022-37904İstismar yok | Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequenarubanetworks · sd-wan · CWE-123 | Yüksek8,8 | — | %0,8 | 12 Ara 2022 |
35İzleyin | CVE-2022-41757İstismar yok | An issue was discovered in the Arm Mali GPU Kernel Driver.arm · valhall gpu kernel driver · CWE-123 | Yüksek8,8 | — | %0,7 | 8 Kas 2022 |
35İzleyin | CVE-2026-81579İstismar yok | An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windowswibu-systems-ag · wibukey · CWE-123 | Yüksek8,8 | — | %0,2 | 27 Ağu 2026 |
34İzleyin | CVE-2020-7560İstismar yok | A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStschneider-electric · ecostruxure control expert · CWE-123 | Yüksek8,6 | — | %1,4 | 10 Ara 2020 |
32İzleyin | CVE-2020-16225İstismar yok | Delta Electronics TPEditor Versions 1.97 and prior.deltaww · tpeditor · CWE-123 | Yüksek7,8 | — | %2,1 | 6 Ağu 2020 |
32İzleyin | CVE-2024-2607İstismar yok | Return registers were overwritten which could have allowed an attacker to execute arbitrary code.mozilla · firefox · CWE-123 | Yüksek8,1 | — | %1,1 | 19 Mar 2024 |
32İzleyin | CVE-2024-36877Kavram kanıtı | Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7CWE-123 | Yüksek8,2 | — | %0,7 | 12 Ağu 2024 |
32İzleyin | CVE-2025-3052Kavram kanıtı | An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.dt research · biosflashshell · CWE-123 | Yüksek8,2 | — | %0,4 | 10 Haz 2025 |
32İzleyin | CVE-2022-35408İstismar yok | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.insyde · insydeh2o · CWE-123 | Yüksek8,2 | — | %0,4 | 22 Eyl 2022 |
32İzleyin | CVE-2022-40262İstismar yok | The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.ami · aptio v · CWE-123 | Yüksek8,2 | — | %0,3 | 20 Eyl 2022 |
31İzleyin | CVE-2018-3971İstismar yok | An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744.sophos · hitmanpro.alert · CWE-123 | Yüksek7,8 | — | %0,5 | 25 Eki 2018 |
- CVE-2015-827141Planlayın
The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
KritikCVSS 9,8İstismar yokEPSS %6rtmpdump project · rtmpdump13 Nis 2017
- CVE-2014-543540Planlayın
An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6
KritikCVSS 9,8İstismar yokEPSS %3honeywell · experion process knowledge system8 Nis 2019
- CVE-2024-4247940Planlayın
llama.cpp allows write-what-where in rpc_server::set_tensor
KritikCVSS 9,8İstismar yokEPSS %3ggml · llama.cpp12 Ağu 2024
- CVE-2021-3844140Planlayın
Eclipse CycloneDDS Write-what-where Condition
KritikCVSS 9,8İstismar yokEPSS %2eclipse · cyclonedds5 May 2022
- CVE-2022-3814339İzleyin
A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images.
KritikCVSS 9,8İstismar yokEPSS %1openimageio · openimageio22 Ara 2022
- CVE-2020-200139İzleyin
PAN-OS: Panorama External control of file vulnerability leads to privilege escalation
KritikCVSS 9,8İstismar yokEPSS %1paloaltonetworks · pan-os13 May 2020
- CVE-2021-3844939İzleyin
Some API functions permit by-design writing or copying data into a given buffer.
KritikCVSS 9,8İstismar yokEPSS %1auvesy · versiondog22 Eki 2021
- CVE-2025-6980939İzleyin
A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling a
KritikCVSS 9,8İstismar yokEPSS %1p2r3 · bareiron16 Mar 2026
- CVE-2025-5529836İzleyin
ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
YüksekCVSS 8,8İstismar yokEPSS %4imagemagick · imagemagick26 Ağu 2025
- CVE-2026-4328436İzleyin
xfrm: esp: avoid in-place decrypt on shared skb frags
YüksekCVSS 8,8SilahlaştırılmışEPSS %2linux · linux kernel8 May 2026
- CVE-2022-152336İzleyin
Fuji Electric D300win Write-what-where condition
KritikCVSS 9,1İstismar yokEPSS %1fujielectric · d300win19 Eki 2022
- CVE-2026-3012136İzleyin
remotion-dev remotion v4.0.409 was discovered to contain an arbitrary file write vulnerability.
KritikCVSS 9,1İstismar yokEPSS %0remotion · remotion15 Haz 2026
- CVE-2021-4254035İzleyin
Emerson WirelessHART Gateway
YüksekCVSS 8,8İstismar yokEPSS %1emerson · wireless 1410 gateway firmware22 Eki 2021
- CVE-2025-990035İzleyin
Libtiff: libtiff write-what-where
YüksekCVSS 8,8İstismar yokEPSS %1red hat · red hat enterprise linux 1023 Eyl 2025
- CVE-2022-3790435İzleyin
Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequen
YüksekCVSS 8,8İstismar yokEPSS %1arubanetworks · sd-wan12 Ara 2022
- CVE-2022-4175735İzleyin
An issue was discovered in the Arm Mali GPU Kernel Driver.
YüksekCVSS 8,8İstismar yokEPSS %1arm · valhall gpu kernel driver8 Kas 2022
- CVE-2026-8157935İzleyin
An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
YüksekCVSS 8,8İstismar yokEPSS %0wibu-systems-ag · wibukey27 Ağu 2026
- CVE-2020-756034İzleyin
A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoSt
YüksekCVSS 8,6İstismar yokEPSS %1schneider-electric · ecostruxure control expert10 Ara 2020
- CVE-2020-1622532İzleyin
Delta Electronics TPEditor Versions 1.97 and prior.
YüksekCVSS 7,8İstismar yokEPSS %2deltaww · tpeditor6 Ağu 2020
- CVE-2024-260732İzleyin
Return registers were overwritten which could have allowed an attacker to execute arbitrary code.
YüksekCVSS 8,1İstismar yokEPSS %1mozilla · firefox19 Mar 2024
- CVE-2024-3687732İzleyin
Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7
YüksekCVSS 8,2Kavram kanıtıEPSS %112 Ağu 2024
- CVE-2025-305232İzleyin
An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.
YüksekCVSS 8,2Kavram kanıtıEPSS %0dt research · biosflashshell10 Haz 2025
- CVE-2022-3540832İzleyin
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.
YüksekCVSS 8,2İstismar yokEPSS %0insyde · insydeh2o22 Eyl 2022
- CVE-2022-4026232İzleyin
The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.
YüksekCVSS 8,2İstismar yokEPSS %0ami · aptio v20 Eyl 2022
- CVE-2018-397131İzleyin
An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744.
YüksekCVSS 7,8İstismar yokEPSS %1sophos · hitmanpro.alert25 Eki 2018