Skip to content
BackEsc
Sign in

CWE-119 · weakness in Memory Corruption

Memory Buffer Bounds

12,236 CVEs · 50 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
50
check available
5
likely to be exploited
2,119

Every one of the 12,236 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Citrix Bleed - Leaking Session TokensCVE-2023-4966Citrix · CVSS 9.4 · 100% likelycovered by CyberSIXT

    Citrix (NetScaler)Storm-0501

  2. Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code…CVE-2017-11882Microsoft Corporation · CVSS 7.8 · 100% likely

    MicrosoftAPT41Bitter

  3. Microsoft SMBv3 - Remote Code ExecutionCVE-2020-0796Microsoft · CVSS 10 · 100% likely

    Microsoft

  4. The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbit…CVE-2008-4250Microsoft · CVSS 9.8 · 99% likelycovered by CyberSIXT

    Microsoft

  5. Palo Alto Network PAN-OS - Remote Code ExecutionCVE-2017-15944Palo Alto Networks · CVSS 9.8 · 98% likely

    Palo Alto Networks

  6. OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold an…CVE-2014-6332Microsoft · CVSS 8.8 · 95% likely

    Microsoft

  7. Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled,…CVE-2010-3765Mozilla · CVSS 9.8 · 83% likely

    Mozilla

  8. Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 20…CVE-2017-11826Microsoft Corporation · CVSS 7.8 · 82% likely

    Microsoft

  9. Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceCVE-2026-88772Citrix NetScaler · CVSS 9.5 · 77% likelycovered by CyberSIXT

    Citrix NetScaler29 articles

  10. The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to re…CVE-2017-6736Cisco · CVSS 8.8 · 70% likely

    Cisco

  11. Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in…CVE-2013-1690Mozilla · CVSS 8.8 · 69% likely

    Mozilla

  12. A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vul…CVE-2018-7445MikroTik · CVSS 9.8 · 66% likely

    MikroTik

  13. On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual serv…CVE-2021-22991F5 · CVSS 9.8 · 62% likely

    F5

  14. Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, a…CVE-2017-11774Microsoft Corporation · CVSS 7.8 · 60% likely

    MicrosoftAPT33OilRig

  15. Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory ReadCVE-2023-6549Cloud Software Group · CVSS 8.2 · 58% likely

    Cloud Software Group

  16. Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automa…CVE-2016-7193Microsoft · CVSS 7.8 · 58% likely

    Microsoft

  17. The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows…CVE-2017-0101Microsoft Corporation · CVSS 7.8 · 57% likely

    Microsoft

  18. An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote…CVE-2020-29557D-Link · CVSS 9.8 · 56% likely

    D-Link

  19. The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving…CVE-2011-1889Microsoft · CVSS 9.8 · 49% likely

    Microsoft

  20. A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could…CVE-2017-6737Cisco · CVSS 8.8 · 45% likely

    Cisco

  21. Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr…CVE-2025-14174Google · CVSS 8.8 · 43% likelycovered by CyberSIXT

    GoogleAPT293 articles

  22. The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…CVE-2013-3660Microsoft · CVSS 7.8 · 39% likely

    MicrosoftFIN6

  23. fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.CVE-2014-3931Looking Glass · CVSS 9.8 · 29% likely

    Looking Glass

  24. A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could…CVE-2017-6742Cisco · CVSS 8.8 · 21% likely

    Cisco

  25. A memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watc…CVE-2025-31200Apple · CVSS 9.8 · 21% likelycovered by CyberSIXT

    Apple1 article

  26. Memory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceCVE-2025-7775NetScaler · CVSS 9.2 · 21% likely

    Citrix (NetScaler)

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in