Skip to content

CWE-244 · weakness in Memory Corruption

Improper Clearing of Heap Memory Before Release

22 CVEs · 1 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1

Every one of the 22 is a mark on the map. Named now: 1 to 22, most at risk first.

  1. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCVE-2026-20349Cisco · CVSS 8.6 · 1.0% likelycovered by CyberSIXT

    Cisco2 articles

  2. Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote att…CVE-2022-20943Cisco · CVSS 5.8 · 1.1% likely

    Cisco

  3. Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote att…CVE-2022-20922Cisco · CVSS 5.8 · 0.9% likely

    Cisco

  4. A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection e…CVE-2023-20070Cisco · CVSS 4 · 0.7% likely

    Cisco

  5. A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category an…CVE-2023-20177Cisco · CVSS 4 · 0.7% likely

    Cisco

  6. nebula-mesh: Decrypted CA private key persists in heap after signingCVE-2026-48025juev · CVSS 6.9 · 0.5% likely

    Juev

  7. An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafte…CVE-2025-70873Sqlite · CVSS 7.5 · 0.5% likely

    SQLite

  8. TOZED ZLT W51 Service Port 7777 heap inspectionCVE-2025-5105TOZED · CVSS 7.3 · 0.5% likely

    TOZED

  9. Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service VulnerabilityCVE-2026-20039Cisco · CVSS 8.6 · 0.4% likely

    Cisco

  10. Multiple Vulnerabilities in IBM Concert SoftwareCVE-2025-1722IBM · CVSS 5.9 · 0.4% likely

    IBM

  11. Multiple Vulnerabilities in IBM Concert SoftwareCVE-2025-1719IBM · CVSS 5.9 · 0.4% likely

    IBM

  12. A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.CVE-2025-26305Libming · CVSS 8.2 · 0.4% likely
  13. A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.CVE-2025-26304Libming · CVSS 8.2 · 0.4% likely
  14. IBM Storage Virtualize Information DisclosureCVE-2025-36118IBM · CVSS 7.5 · 0.4% likely

    IBM

  15. An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.CVE-2025-45663Netsurf-Browser · CVSS 6.5 · 0.4% likely
  16. A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo…CVE-2023-20031Cisco · CVSS 4 · 0.4% likely

    Cisco

  17. IBM Concert Software information disclosureCVE-2025-1759IBM · CVSS 5.9 · 0.4% likely

    IBM

  18. BM Concert Software Improper Clearing of Heap Memory Before Release.CVE-2025-1721IBM · CVSS 5.9 · 0.3% likely

    IBM

  19. Multiple Vulnerabilities in IBM Concert Software.CVE-2025-33101IBM · CVSS 5.9 · 0.2% likely

    IBM

  20. IBM MQ Operator information disclosureCVE-2025-33013IBM · CVSS 6.2 · 0.2% likely

    IBM

  21. IBM Concert Software Improper Clearing of Heap MemoryCVE-2026-1510IBM · CVSS 4.7 · 0.1% likely

    IBM

  22. Multiple Vulnerabilities in IBM Concert Software.CVE-2025-36083IBM · CVSS 6.2 · 0.1% likely

    IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in