Skip to content
OpenAdvisories

Weakness (CWE)

CWE-123: Write-what-where Condition

Base Draft

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Use a language that provides appropriate memory abstractions.

  2. Operation

    Use OS-level preventative functionality integrated after the fact. Not a complete solution.

Source: MITRE CWE-123

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-46300 Exploited Public exploit EPSS 16%

    net: skbuff: preserve shared-frag marker during coalescing

    In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve shared-frag marker during coalescing skb_try_coalesce() can attach paged frags from @from to @to. If @from has SKBFL_SHARED_FRAG set, the resulting @to skb can contain t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
    KEV Oct 28, 2026
  • High 8.2
    CVE-2025-22225 Exploited · Ransomware

    VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may tri…

    Virtualization
    KEV Mar 4, 2025