Skip to content
BackEsc
Sign in

connection · two weakness classes

Denial of Service with Memory Corruption

313 CVEs · 2 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names a weakness from both classes, neither being the other's parent in the CWE hierarchy: this is what the line between them on the dial stands for.

exploited in the wild
2
likely to be exploited
8

Every one of the 313 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. PHP 8.2 < 8.2.35, 8.3 < 8.3.36, 8.4 < 8.4.27, 8.5 < 8.5.12 - Use-After-Free Remote Code ExecutionCVE-2026-109619PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

    CWE-416PHPChina-nexus actorLazarus Group59 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

  2. PHP2Shell (CVE-2026-109618/CVE-2026-109619) - Active Crash DetectionCVE-2026-109618PHP Group · CVSS 9.2 · 100% likelycovered by CyberSIXT

    CWE-416PHPChina-nexus actorLazarus Group60 articles4 articles this week: Check Point links PHP2Shell flaws to destructive gateway attacks

  3. An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a s…CVE-2020-13934Apache Tomcat · 64% likely

    CWE-401

  4. An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause an out-of-bounds write, by sen…CVE-2019-1930741% likely

    CWE-125

  5. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…CVE-2017-8537Microsoft Corporation · 17% likely

    CWE-119Microsoft

  6. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…CVE-2017-8536Microsoft Corporation · 17% likely

    CWE-119Microsoft

  7. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…CVE-2017-8535Microsoft Corporation · 17% likely

    CWE-119Microsoft

  8. A heap overflow flaw was found in the Linux kernel, all versions 3.x.x and 4.x.x before 4.18.0, in Marvell WiFi chip driver. The vulnerability allows a remote attacker to cause a…CVE-2019-14901Red Hat · CVSS 8.8 · 16% likely

    CWE-400Red Hat

  9. D-Link DIR-823X HTTP POST Request set_wifi_blacklists null pointer dereferenceCVE-2025-1103D-Link · CVSS 6.5 · 14% likely

    CWE-476D-Link

  10. gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1, has an integer signedness error…CVE-2018-571113% likely

    CWE-681

  11. Temporary files are not cleaned after OOM when parsing HTTP request dataCVE-2019-11048PHP Group · CVSS 5.3 · 6.3% likely

    CWE-400PHP

  12. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…CVE-2017-8542Microsoft Corporation · 6.0% likely

    CWE-119Microsoft

  13. The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…CVE-2017-8539Microsoft Corporation · 6.0% likely

    CWE-119Microsoft

  14. HTTP/2 HPACK integer overflow and buffer allocationCVE-2023-36478eclipse · CVSS 7.5 · 4.8% likely

    CWE-190Eclipse Foundation

  15. In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while processi…CVE-2018-13785CVSS 6.5 · 4.4% likely

    CWE-369

  16. In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in epan/dissectors/packet-dcm.c by…CVE-2018-143413.6% likely

    CWE-190

  17. In Wireshark 2.2.0 to 2.2.3 and 2.0.0 to 2.0.9, the ASTERIX dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. This was addressed…CVE-2017-55962.9% likely

    CWE-190

  18. An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv6 extension headers are valid) doesn't check whether the he…CVE-2020-174442.8% likely

    CWE-190

  19. In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules…CVE-2019-250162.8% likely

    CWE-459

  20. The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709,…CVE-2018-0895Microsoft Corporation · 2.8% likely

    CWE-401Microsoft

  21. In Libreswan 3.27 an assertion failure can lead to a pluto IKE daemon restart. An attacker can trigger a NULL pointer dereference by initiating an IKEv2 IKE_SA_INIT exchange, foll…CVE-2019-123122.7% likely

    CWE-476

  22. Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: thi…CVE-2020-12417Mozilla · 2.7% likely

    CWE-617Mozilla

  23. An issue was discovered in the http crate before 0.1.20 for Rust. An integer overflow in HeaderMap::reserve() could result in denial of service (e.g., an infinite loop).CVE-2020-255742.5% likely

    CWE-190

  24. The Windows kernel in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709,…CVE-2018-0901Microsoft Corporation · 2.4% likely

    CWE-401Microsoft

  25. The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file.CVE-2017-121402.2% likely

    CWE-400

  26. An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service atta…CVE-2020-27813golang-github-gorilla-websocket · 2.2% likely

    CWE-190

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in