Skip to content

CWE-126 · weakness in Memory Corruption

Buffer Over-read

592 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

likely to be exploited
10

Every one of the 592 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Denial of Service in HTTP Message Processing in SquidCVE-2023-49285squid-cache · CVSS 8.6 · 88% likely

    Squid-Cache

  2. The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input st…CVE-2017-7668Apache Software Foundation · 57% likely

    Apache

  3. In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.CVE-2017-7679Apache Software Foundation · 39% likely

    Apache

  4. Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-21277Microsoft · CVSS 7.5 · 39% likely

    Microsoft

  5. Windows Remote Desktop Licensing Service Denial of Service VulnerabilityCVE-2024-38071Microsoft · CVSS 7.5 · 36% likely

    Microsoft

  6. The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005 SP1 and 2008 Gold and SP1, and Visual C++ 2005 SP1 and 2008 Gold and SP1 does not pr…CVE-2009-2495CVSS 6.5 · 34% likely
  7. A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This v…CVE-2024-20290Cisco · CVSS 7.5 · 33% likely

    Cisco

  8. DHCP Server Service Information Disclosure VulnerabilityCVE-2023-38152Microsoft · CVSS 5.3 · 24% likely

    Microsoft

  9. Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityCVE-2023-36397Microsoft · CVSS 9.8 · 18% likely

    Microsoft

  10. Windows Cloud Files Mini Filter Driver Information Disclosure VulnerabilityCVE-2024-26160Microsoft · CVSS 5.5 · 11% likely

    Microsoft

  11. Heap over-read in PHP EXIF extensionCVE-2019-11036PHP Group · CVSS 4.8 · 7.0% likely

    PHP

  12. Fuji Electric FRENIC LOADER v3.3 v7.3.4.1a of FRENIC-Mini (C1), FRENIC-Mini (C2), FRENIC-Eco, FRENIC-Multi, FRENIC-MEGA, FRENIC-Ace. A buffer over-read vulnerability may allow rem…CVE-2018-14790Fuji Electric · 5.4% likely

    Fuji Electric

  13. FreeRDP prior to version 2.0.0-rc4 contains several Out-Of-Bounds Reads in the NTLM Authentication module that results in a Denial of Service (segfault).CVE-2018-8789Check Point Software Technologies Ltd. · 5.2% likely

    Check Point

  14. Windows Common Log File System Driver Information Disclosure VulnerabilityCVE-2023-28266Microsoft · CVSS 5.5 · 4.4% likely

    Microsoft

  15. rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_secondary_order() that results in a Denial of Service (segfault).CVE-2018-8799Check Point Software Technologies Ltd. · 4.1% likely

    Check Point

  16. rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function process_bitmap_updates() that results in a Denial of Service (segfault).CVE-2018-8796Check Point Software Technologies Ltd. · 4.1% likely

    Check Point

  17. rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function cssp_read_tsrequest() that results in a Denial of Service (segfault).CVE-2018-8792Check Point Software Technologies Ltd. · 4.1% likely

    Check Point

  18. rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpsnd_process_ping() that results in an information leak.CVE-2018-8798Check Point Software Technologies Ltd. · 3.8% likely

    Check Point

  19. rdesktop versions up to and including v1.8.3 contain an Out-Of-Bounds Read in function rdpdr_process() that results in an information leak.CVE-2018-8791Check Point Software Technologies Ltd. · 3.8% likely

    Check Point

  20. Windows Common Log File System Driver Elevation of Privilege VulnerabilityCVE-2023-38144Microsoft · CVSS 7.8 · 3.4% likely

    Microsoft

  21. DHCP Server Service Denial of Service VulnerabilityCVE-2023-35638Microsoft · CVSS 7.5 · 3.3% likely

    Microsoft

  22. DHCP Server Service Information Disclosure VulnerabilityCVE-2023-35643Microsoft · CVSS 7.5 · 2.6% likely

    Microsoft

  23. Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2023-36581Microsoft · CVSS 7.5 · 2.5% likely

    Microsoft

  24. DHCP Server Service Denial of Service VulnerabilityCVE-2023-36392Microsoft · CVSS 7.5 · 2.5% likely

    Microsoft

  25. Windows Kernel Memory Information Disclosure VulnerabilityCVE-2026-26169Microsoft · CVSS 6.1 · 2.4% likely

    Microsoft

  26. .NET, .NET Framework, and Visual Studio Remote Code Execution VulnerabilityCVE-2025-21176Microsoft · CVSS 8.8 · 2.4% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in