CWE-1384 6 件の CVE MITRE の定義 ↗

CWE-1384: Improper Handling of Physical or Environmental Conditions

概要

CWE-1384（Improper Handling of Physical or Environmental Conditions）は各種脆弱性データベースや評価で用いられる弱点タイプを説明します。定義・背景・対応する CVE は以下の各セクションを参照してください。

セキュリティへの影響
セキュリティ影響：製品や文脈に依存します。CVE 記録、深刻度、MITRE の説明を参照して優先度を判断してください。

説明

The product does not properly handle unexpected physical or environmental conditions that occur naturally or are artificially induced.

適用プラットフォーム

種別 名称 クラス 普遍性 OS / CPE
technology — System on Chip Undetermined —
technology — ICS/OT Undetermined —

このデータベースの関連 CVE

これらの CVE は本データベースでこの弱点に対応付けられており、追跡と検索のために保持されています。

CVE 公開 概要
CVE-2026-49325 2026-05-29 Improper handling of physical conditions in the bike-shutdown control of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows a physical attacker with access to the Wireless Control Module…
CVE-2026-2760 2026-02-24 Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thund…
CVE-2026-2759 2026-02-24 Incorrect boundary conditions in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2026-2757 2026-02-24 Incorrect boundary conditions in the WebRTC: Audio/Video component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.
CVE-2025-52557 2025-06-20 Mail-0's Zero is an open-source email solution. In version 0.8 it's possible for an attacker to craft an email that executes javascript leading to session hijacking due to improper sanitization. This …
CVE-2024-39355 2025-02-12 Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of service via local access.

旧名称

  • Improper Handling of Extreme Physical Environment Conditions (2022-06-28)

コンテンツ投稿

名称
CWE Content Team
組織
MITRE
日付
2022-04-21
バージョン
4.7

コンテンツの変更履歴

日付 名称 バージョン 重要度 コメント
2022-06-28 CWE Content Team 4.8 — updated Description, Name, Potential_Mitigations, Relationships, Type
2022-10-13 CWE Content Team 4.9 — updated References
2023-01-31 CWE Content Team 4.10 — updated Applicable_Platforms, Relationships
2023-04-27 CWE Content Team 4.11 — updated Relationships
2023-06-29 CWE Content Team 4.12 — updated Mapping_Notes
2023-10-26 CWE Content Team 4.13 — updated Observed_Examples
2025-09-09 CWE Content Team 4.18 — updated References
2025-12-11 CWE Content Team 4.19 — updated Demonstrative_Examples, References, Weakness_Ordinalities

貢献

タイプ 名称 日付 コメント
Feedback Members of the Hardware CWE Special Interest Group 2022-05-13 Provided feedback on descriptions
cvelogic Threat Intelligence