Cyber Resilience

CWE · MITRE source

CWE-123Write-what-where Condition

Abstraction: Base · CVEs in our corpus: 56

Any condition where the attacker has the ability to write an arbitrary value to an arbitrary location, often as the result of a buffer overflow.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 4 mapping(s) from 4 framework(s): STIG windows 10 1 (partial) · STIG windows 11 1 (partial) · STIG oracle linux 8 1 (partial) · STIG rhel 8 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent
Stop it (NIST 800-53 / CSF Protect)
  • SI-16 Memory Protection
  • PR.PS-06
  • SI-16 Memory Protection
  • SI-10 Information Input Validation
Detect
Catch it (CSF Detect / Respond)

—

Harden
Shrink the surface (DISA STIG)
  • 4 hardening rules · 4 OS baselines
Validate
Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (1)AI-assisted

Control Title Family Why it addresses this CWE
SI-16Memory ProtectionSIWrite-what-where primitives are neutralized when the attacker cannot execute the memory they control.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2026-43284 8.88.80.93242026-05-08
CVE-2026-43500 8.57.80.92852026-05-11
CVE-2025-22225 KEV 8.48.20.01002025-03-04
CVE-2015-8271 8.09.80.05922017-04-13
CVE-2014-5435 7.89.80.03472019-04-08
CVE-2024-42479 7.810.00.02632024-08-12
CVE-2022-38143 7.69.80.01422022-12-22
CVE-2021-38449 7.59.80.01252021-10-22
CVE-2025-69809 7.39.80.00532026-03-16
CVE-2026-301216.89.10.00322026-06-15
CVE-2022-41757 6.78.80.00702022-11-08
CVE-2025-9900 6.78.80.00742025-09-23
CVE-2025-62164 6.78.80.00922025-11-21
CVE-2026-46300 6.67.80.07012026-05-23
CVE-2020-2001 6.48.10.01332020-05-13
CVE-2020-7560 6.38.60.01392020-12-11
CVE-2024-2607 6.38.10.01112024-03-19
CVE-2025-55298 6.37.50.04352025-08-26
CVE-2018-12036 6.27.80.01712018-06-07
CVE-2020-16225 6.27.80.02092020-08-07
CVE-2021-42540 6.28.00.01032021-10-22
CVE-2024-44067 6.28.40.00252024-08-19
CVE-2017-10994 6.17.30.04942017-07-07
CVE-2018-16962 5.97.80.00522018-09-12
CVE-2018-3971 5.97.80.00542018-10-25