Skip to content
BackEsc
Sign in

CWE-120 · weakness in Memory Corruption

Classic Buffer Overflow

4,418 CVEs · 23 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
23
check available
2
likely to be exploited
118

Every one of the 4,418 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Windows Server 2003 & IIS 6.0 - Remote Code ExecutionCVE-2017-7269Microsoft · CVSS 9.8 · 100% likely

    MicrosoftBlackTech

  2. PHP-FPM Path Info Buffer Underflow - Remote Code ExecutionCVE-2019-11043PHP · CVSS 8.7 · 100% likelycovered by CyberSIXT

    PHP1 article

  3. Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Modu…CVE-2016-6366Cisco · CVSS 8.8 · 88% likely

    Cisco

  4. Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScri…CVE-2007-5659Adobe · CVSS 7.8 · 87% likely

    Adobe

  5. The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited b…CVE-2016-10174NETGEAR · CVSS 9.8 · 83% likely

    NETGEAR

  6. An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to exe…CVE-2018-6789Exim · CVSS 9.8 · 82% likely

    Exim

  7. Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to impro…CVE-2013-1331Microsoft · CVSS 7.8 · 80% likely

    Microsoft

  8. A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an au…CVE-2025-20333Cisco · CVSS 9.9 · 72% likelycovered by CyberSIXT

    CiscoUAT-4356

  9. Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2020-15999Google · CVSS 9.6 · 64% likely

    Google

  10. Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffe…CVE-2010-2572Microsoft · CVSS 7.8 · 59% likely

    Microsoft

  11. D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,CVE-2022-37055D-Link · CVSS 9.8 · 56% likely

    D-Link

  12. A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 a…CVE-2023-41064Apple · CVSS 7.8 · 53% likely

    Apple

  13. Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute ar…CVE-2006-2492Microsoft · CVSS 8.8 · 48% likely

    Microsoft

  14. NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buf…CVE-2017-6862NETGEAR · CVSS 9.8 · 46% likely

    NETGEAR

  15. The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Wi…CVE-2016-0099Microsoft · CVSS 7.8 · 37% likely

    Microsoft

  16. Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF docum…CVE-2013-0641Adobe · CVSS 7.8 · 32% likely

    Adobe

  17. A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36…CVE-2023-33010Zyxel · CVSS 9.8 · 29% likely

    Zyxel

  18. A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 P…CVE-2023-33009Zyxel · CVSS 9.8 · 28% likely

    Zyxel

  19. A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the f…CVE-2020-5135SonicWall · CVSS 9.8 · 27% likely

    SonicWall

  20. Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was publish…CVE-2020-15069Sophos · CVSS 9.8 · 11% likely

    Sophos

  21. The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and c…CVE-2004-0210Microsoft · CVSS 7.8 · 7.2% likely

    Microsoft

  22. A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with ker…CVE-2021-30983Apple · CVSS 7.8 · 2.9% likely

    Apple

  23. A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS S…CVE-2025-43520Apple · CVSS 5.5 · 0.4% likelycovered by CyberSIXT

    AppleAPT292 articles

  24. Apache HTTP Server - Remote Code ExecutionCVE-2020-11984Apache HTTP Server · 90% likely
  25. FileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoSCVE-2009-08843.4% likely
  26. The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS Cli…CVE-2014-0195100% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in