7 terms
A buffer overflow is a memory-safety vulnerability in which a program writes past the end of a buffer, corrupting adjacent memory and control data.
CVE (Common Vulnerabilities and Exposures) is the global catalog of unique identifiers for publicly disclosed security vulnerabilities in software and hardware.
CVSS, the Common Vulnerability Scoring System, rates the technical severity of software vulnerabilities on a scale from 0.0 to 10.0 using standard metrics.
CWE (Common Weakness Enumeration) is a cybersecurity catalog of software and hardware weakness types, used to classify the root causes of vulnerabilities.
Privilege escalation is the exploitation of a vulnerability or misconfiguration to gain access rights beyond those an account or process was granted.
RCE, or Remote Code Execution, is a vulnerability class that lets an attacker run arbitrary code on a target system over a network without local access.
A zero-day is a software vulnerability unknown to the vendor or without an available fix, leaving defenders zero days to patch before exploitation.