Improperly Controlled Sequential Memory Allocation

Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Unbounded memory growth with session handling in TLSv1.3CVE-2024-2511OpenSSL · CVSS 5.9 · 59% likely

   OpenSSL

2. A stack exhaustion flaw in control channel code may cause named to terminate unexpectedlyCVE-2023-3341ISC · CVSS 7.5 · 2.9% likely

   ISC

3. The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.3, watchOS 10.5. An app may be abl…CVE-2024-27804Apple · CVSS 8.1 · 1.3% likely

   Apple

4. Smallrye-fault-tolerance: smallrye fault toleranceCVE-2025-2240Redhat · CVSS 7.5 · 1.2% likely

   Red Hat

5. gzip transfer encoding caused out-of-memory crashCVE-2021-43174NLnet Labs · 1.1% likely

   NLnet Labs

6. Unbounded Memory Growth in the QUIC PATH_CHALLENGE HandlerCVE-2026-34183OpenSSL · CVSS 7.5 · 1.0% likelycovered by CyberSIXT

   OpenSSL

7. MessagePack: Nested arrays can blow past buffer length limitsCVE-2026-92707MessagePack-CSharp · CVSS 5.3 · 0.7% likelycovered by CyberSIXT

   MessagePack-CSharp3 articles

8. Denial of service via malicious preflight requests in github.com/rs/corsCVE-2025-47908github.com/rs/cors · CVSS 7.5 · 0.7% likely
9. Junos OS: SRX Series: Policies that rely on JDPI-Decoder actions may fail openCVE-2023-28968Juniper Networks · CVSS 5.3 · 0.6% likely

   Juniper Networks

10. msgpack-java JRuby decoder allocates from declared header counts with no cap: 5-byte message forces multi-GiB OOMCVE-2026-126366msgpack · CVSS 7.5 · 0.5% likely

    Msgpack

11. veraPDF Parser DoS via PostScript Type 1 Font ProgramsCVE-2026-54081veraPDF · CVSS 6.9 · 0.5% likely

    veraPDF

12. veraPDF Parser DoS via PostScript CMap StreamsCVE-2026-54080veraPDF · CVSS 6.9 · 0.5% likely

    veraPDF

13. A vulnerability has been identified in SIMATIC Energy Manager Basic (All versions < V7.5), SIMATIC Energy Manager PRO (All versions < V7.5), SIMATIC IPC DiagBase (All versions), S…CVE-2023-52891Siemens · CVSS 5.3 · 0.5% likely

    Siemens

14. An out-of-memory (OOM) issue in foxinmy/weixin4jCVE-2026-24819foxinmy · CVSS 6.3 · 0.4% likely
15. A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAMCVE-2026-13056MongoDB · CVSS 6.5 · 0.4% likely

    MongoDB

16. Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion.CVE-2026-18772Samsung Open Source · CVSS 6.5 · 0.4% likely

    Samsung Open Source

17. Post-auth memory exhaustion via bitwise match expressionsCVE-2026-8199MongoDB, Inc. · CVSS 6.5 · 0.3% likely

    MongoDB

18. The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventur…CVE-2024-27796Apple · CVSS 8.1 · 0.3% likely

    Apple

19. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2025-13945Wireshark Foundation · CVSS 5.5 · 0.2% likelycovered by CyberSIXT

    Wireshark Foundation2 articles

20. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2026-3201Wireshark Foundation · CVSS 4.7 · 0.2% likely

    Wireshark Foundation

21. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2026-6533Wireshark Foundation · CVSS 5.5 · 0.1% likely

    Wireshark Foundation

22. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2026-6535Wireshark Foundation · CVSS 5.5 · 0.1% likely

    Wireshark Foundation

23. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2026-96421Wireshark Foundation · CVSS 5.5 · 0.1% likely

    Wireshark Foundation

24. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2026-6869Wireshark Foundation · CVSS 5.5 · 0.1% likely

    Wireshark Foundation

25. Improperly Controlled Sequential Memory Allocation in WiresharkCVE-2026-6867Wireshark Foundation · CVSS 5.5 · 0.1% likely

    Wireshark Foundation

26. AIOHTTP: Unbounded cookie storage in client CookieJarCVE-2026-128125aio-libs · CVSS 6.3

    Aio-Libs

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.