CWE-122 · weakness in Memory Corruption
Heap-based Buffer Overflow
3,923 CVEs · 20 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 20
- likely to be exploited
- 60
Every one of the 3,923 is a mark on the map. Named now: 1 to 26, most at risk first.
- Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attac…
- A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProx…
- Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF f…
- Acrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code Execution
- Glibc: buffer overflow in ld.so leading to privilege escalation
- Heap-overflow vulnerability
- Windows Common Log File System Driver Elevation of Privilege Vulnerability
- A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects…
- BIG-IP APM OAuth vulnerability
- Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- Windows Common Log File System Driver Elevation of Privilege Vulnerability
- Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- Heap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e…
- Windows DWM Core Library Elevation of Privilege Vulnerability
- A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiO…
- Windows NTFS Remote Code Execution Vulnerability
- Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- ipv6: account for fraggap on the paged allocation path
- Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
- A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. Th…
- A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A…
- Libarchive Remote Code Execution Vulnerability
- Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
- A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the ne…
- Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.