CWE-123Write-what-where Condition

Abstraction: Base · CVEs in our corpus: 63

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

Last updated: 16 October 2026 14:24 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 3 mapping(s) from 3 framework(s): STIG windows 10 1 (partial) · STIG oracle linux 8 1 (partial) · STIG rhel 8 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

SI-16 Memory Protection
PR.PS-06
SI-16 Memory Protection
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

3 hardening rules · 3 OS baselines

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls PROPOSED for this weakness (1)AI-assisted

These are model PROPOSALS, not graded mappings. They come from controls_to_cwe_proposals, which carries no grade field at all; across the CWE pages 1,540 of 1,722 such associations (89%) have never been graded by anything. The heading said “address” until 2026-09-29, which asserted a relationship the data does not carry. Graded cross-walks are on the framework map, not here.

Control	Title	Family	Why it addresses this CWE
`SI-16`	Memory Protection	SI	Write-what-where primitives are neutralized when the attacker cannot execute the memory they control.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2026-43284`	8.8	8.8	0.9419	2026-05-08
`CVE-2025-22225` KEV	8.4	8.2	0.0102	2025-03-04
`CVE-2015-8271`	8.0	9.8	0.0592	2017-04-13
`CVE-2014-5435`	7.8	9.8	0.0347	2019-04-08
`CVE-2024-42479`	7.8	10.0	0.0261	2024-08-12
`CVE-2022-38143`	7.6	9.8	0.0147	2022-12-22
`CVE-2021-38449`	7.5	9.8	0.0125	2021-10-22
`CVE-2025-69809`	7.3	9.8	0.0054	2026-03-16
`CVE-2026-30121`	6.9	9.1	0.0048	2026-06-15
`CVE-2022-41757`	6.7	8.8	0.0076	2022-11-08
`CVE-2025-9900`	6.7	8.8	0.0097	2025-09-23
`CVE-2025-62164`	6.7	8.8	0.0093	2025-11-21
`CVE-2020-2001`	6.4	8.1	0.0137	2020-05-13
`CVE-2020-7560`	6.3	8.6	0.0145	2020-12-11
`CVE-2024-2607`	6.3	8.1	0.0111	2024-03-19
`CVE-2025-55298`	6.3	7.5	0.0449	2025-08-26
`CVE-2026-43500`	6.3	7.8	0.0226	2026-05-11
`CVE-2026-46300`	6.3	7.8	0.0243	2026-05-23
`CVE-2018-12036`	6.2	7.8	0.0168	2018-06-07
`CVE-2020-16225`	6.2	7.8	0.0209	2020-08-07
`CVE-2021-42540`	6.2	8.0	0.0103	2021-10-22
`CVE-2024-44067`	6.2	8.4	0.0025	2024-08-19
`CVE-2017-10994`	6.1	7.3	0.0494	2017-07-07
`CVE-2026-81579`	6.0	8.8	0.0017	2026-08-27
`CVE-2026-94128`	6.0	8.8	0.0018	2026-09-21