Buffer Underwrite

Every one of the 47 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,…CVE-2015-2426Microsoft · CVSS 8.8 · 87% likely

   Microsoft

2. A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0…CVE-2023-25610Fortinet · CVSS 9.3 · 18% likely

   Fortinet

3. In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaustion and denial of service while read…CVE-2018-5388strongSwan · 3.9% likely

   Strongswan

4. UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack appears to be exploitable via network c…CVE-2018-15361UltraVNC · 2.9% likely

   UltraVNC

5. XMP Toolkit SDK SVG_Adapter ParseFullNS Buffer UnderflowCVE-2021-36064Adobe · CVSS 7.8 · 2.7% likely

   Adobe

6. NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.CVE-2021-38575TianoCore · 2.0% likely

   TianoCore

7. Cap'n Proto WebSocket message can cause crashCVE-2023-48230capnproto · CVSS 5.9 · 1.9% likely

   Capnproto

8. Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service VulnerabilityCVE-2022-20683Cisco · CVSS 8.6 · 1.5% likely

   Cisco

9. Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.CVE-2021-38578TianoCore · CVSS 7.4 · 1.0% likely

   TianoCore

10. ImageMagick has Stack Buffer Overflow in image.cCVE-2025-53101ImageMagick · CVSS 7.4 · 0.9% likely

    Imagemagick

11. An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles t…CVE-2026-40013Open-Xchange GmbH · CVSS 4.3 · 0.9% likely

    Open-Xchange

12. Microsoft Office Excel Remote Code Execution VulnerabilityCVE-2026-97008Microsoft · CVSS 8.8 · 0.9% likely

    Microsoft

13. A heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to memory corrupti…CVE-2023-32614Accusoft · CVSS 7 · 0.8% likely

    Accusoft

14. Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access.CVE-2023-34351Intel · CVSS 7.5 · 0.7% likely

    Intel

15. Wazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissionsCVE-2025-62786wazuh · CVSS 6.3 · 0.7% likely

    Wazuh

16. Glib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharCVE-2025-4373Siemens · CVSS 4.8 · 0.6% likely

    Siemens

17. Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()CVE-2026-0966Red Hat · CVSS 6.5 · 0.6% likely

    Red Hat

18. A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in remote.c. This vulnerability occurs in t…CVE-2026-34253CVSS 8.2 · 0.6% likely
19. A buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A specially-crafted malformed file can cause memo…CVE-2022-33896Hancom · CVSS 7.8 · 0.5% likely

    Hancom

20. Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowCVE-2026-44631Apache Software Foundation · CVSS 9.8 · 0.5% likely

    Apache

21. Zoom Apps - Heap-based Buffer OverflowCVE-2025-27440Zoom Communications, Inc · CVSS 8.5 · 0.4% likely

    Zoom Communications, Inc

22. Zoom Apps - Buffer UnderflowCVE-2025-27439Zoom Communications, Inc · CVSS 8.5 · 0.4% likely

    Zoom Communications, Inc

23. Animate | Buffer Underwrite ('Buffer Underflow') (CWE-124)CVE-2024-52990Adobe · CVSS 7.8 · 0.4% likely

    Adobe

24. Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflowCVE-2026-16439Eclipse Foundation · CVSS 5.8 · 0.4% likely

    Eclipse Foundation

25. YAML::Syck versions before 1.38 for Perl has an out-of-bounds readCVE-2026-5089TODDR · CVSS 7.3 · 0.4% likely

    TODDR

26. Buffer Underwrite in ares_inet_net_pton()CVE-2023-31130c-ares · CVSS 4.1 · 0.4% likely

    C-Ares

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.