CWE-123 · weakness in Memory Corruption
Write-what-where Condition
65 CVEs · 2 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 2
- likely to be exploited
- 1
Every one of the 65 is a mark on the map. Named now: 1 to 26, most at risk first.
- net: skbuff: preserve shared-frag marker during coalescing
- VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write leading to an escape of the s…
- xfrm: esp: avoid in-place decrypt on shared skb frags
Linux1 article1 article this week: Microsoft warns attackers use GSocket relay tool to retain access to Linux servers
- The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code.
- Foxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability, which allows remote attackers to execute arbitrary code via a crafted document.
- ImageMagick Format String Bug in InterpretImageFilename leads to arbitrary code execution
- An arbitrary memory write vulnerability exists in the dual_onsrv.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, that could le…
- llama.cpp allows write-what-where in rpc_server::set_tensor
- Eclipse CycloneDDS Write-what-where Condition
- Delta Electronics TPEditor Versions 1.97 and prior. A write-what-where condition may be exploited by processing a specially crafted project file. Successful exploitation of this v…
- A heap out-of-bounds write vulnerability exists in the way OpenImageIO v2.3.19.0 processes RLE encoded BMP images. A specially-crafted bmp file can write to arbitrary out of bound…
- A CWE-123: Write-what-where Condition vulnerability exists in EcoStruxure™ Control Expert (all versions) and Unity Pro (former name of EcoStruxure™ Control Expert) (all versions),…
- PAN-OS: Panorama External control of file vulnerability leads to privilege escalation
- AUVESY Versiondog
- Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are una…
- Emerson WirelessHART Gateway
- Libtiff: libtiff write-what-where
- VLLM deserialization vulnerability leading to DoS and potential RCE
- An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain…
- Vulnerabilities in ArubaOS running on 7xxx series controllers exist that allows an attacker to execute arbitrary code during the boot sequence. Successful exploitation could allow…
- Micro-Star International Z-series motherboards (Z590, Z490, and Z790) and B-series motherboards (B760, B560, B660, and B460) with firmware 7D25v14, 7D25v17 to 7D25v19, and 7D25v1A…
- An arbitrary write vulnerability in Microsoft signed UEFI firmware from DT Research Inc.
- XMP Toolkit SDK Write-What-Where Condition Could Lead To Local Application Denial Of Service
- A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enabling arbitrary code execution via a crafted p…
- Fuji Electric D300win Write-what-where condition
- An exploitable arbitrary write vulnerability exists in the 0x2222CC IOCTL handler functionality of Sophos HitmanPro.Alert 3.7.6.744. A specially crafted IRP request can cause the…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.