Skip to content

CWE-121 · weakness in Memory Corruption

Stack-based Buffer Overflow

4,147 CVEs · 20 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
20
likely to be exploited
81

Every one of the 4,147 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allow…CVE-2025-22457Ivanti · CVSS 9 · 100% likely

    Ivanti

  2. Ivanti Connect Secure - Stack-based Buffer OverflowCVE-2025-0282Ivanti · CVSS 9 · 100% likely

    Ivanti

  3. SonicWall SMA100 Stack - Buffer Overflow/Remote Code ExecutionCVE-2021-20038SonicWall · CVSS 9.8 · 100% likely

    SonicWall

  4. Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted arg…CVE-2009-0927Adobe · CVSS 8.8 · 97% likely

    AdobeAPT12

  5. Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in Di…CVE-2008-0015Microsoft · CVSS 8.8 · 77% likelycovered by CyberSIXT

    Microsoft

  6. Cisco Small Business RV Series Routers VulnerabilitiesCVE-2022-20699Cisco · CVSS 10 · 72% likely

    Cisco

  7. Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to ex…CVE-2014-9163Adobe · CVSS 7.8 · 45% likely

    Adobe

  8. A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote atta…CVE-2025-20352Cisco · CVSS 7.7 · 41% likely

    Cisco

  9. Amcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly exe…CVE-2020-5735Amcrest · CVSS 8.8 · 36% likely

    Amcrest

  10. A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiM…CVE-2025-32756Fortinet · CVSS 9.6 · 31% likely

    Fortinet

  11. Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context…CVE-2018-5002Adobe · CVSS 7.8 · 24% likely

    Adobe

  12. Cisco Small Business RV Series Routers VulnerabilitiesCVE-2022-20708Cisco · CVSS 10 · 15% likely

    Cisco

  13. Cisco Small Business RV Series Routers VulnerabilitiesCVE-2022-20701Cisco · CVSS 10 · 9.7% likely

    Cisco

  14. Cisco Small Business RV Series Routers VulnerabilitiesCVE-2022-20703Cisco · CVSS 10 · 9.2% likely

    Cisco

  15. Cisco Small Business RV Series Routers VulnerabilitiesCVE-2022-20700Cisco · CVSS 10 · 5.7% likely

    Cisco

  16. An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a r…CVE-2021-27137DD-WRT · CVSS 8.1 · 4.0% likelycovered by CyberSIXT

    DD-WRT

  17. Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauth…CVE-2025-42599QUALITIA CO., LTD. · CVSS 9.8 · 3.4% likely

    QUALITIA CO., LTD.

  18. A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to…CVE-2026-7273Zyxel · CVSS 8.8 · 2.7% likelycovered by CyberSIXT

    ZyxelRed Heron11 articles

  19. BigIP APM VulnerabilityCVE-2025-53521F5 · CVSS 9.8 · 2.3% likelycovered by CyberSIXT

    F5Poisoned Refresh3 articles

  20. Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) An…CVE-2013-2597Code Aurora · CVSS 8.4 · 1.5% likely

    Code Aurora

  21. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Although authentication is requ…CVE-2020-10924NETGEAR · CVSS 8.8 · 87% likely

    NETGEAR

  22. Cisco Small Business RV Series Routers VulnerabilitiesCVE-2022-20705Cisco · CVSS 10 · 80% likely

    Cisco

  23. GNU Wget: stack overflow in HTTP protocol handlingCVE-2017-13089GNU Project · CVSS 8.8 · 80% likely

    GNU

  24. D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login actionCVE-2016-6563D-Link · 80% likely

    D-Link

  25. Windows Netlogon Remote Code Execution VulnerabilityCVE-2026-41089Microsoft · CVSS 9.8 · 78% likelycovered by CyberSIXT

    Microsoft

  26. A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in cod…CVE-2022-22274SonicWall · 76% likely

    SonicWall

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in