Skip to content

CWE-786 · weakness in Memory Corruption

Access of Memory Location Before Start of Buffer

8 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

  1. The issue was addressed with improved memory handling. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Proc…CVE-2024-27808Apple · CVSS 7.5 · 1.2% likely

    Apple

  2. Access of Memory Location Before Start of Buffer in radareorg/radare2CVE-2022-0522radareorg · CVSS 6.3 · 1.0% likely

    Radareorg

  3. Access of Memory Location Before Start of Buffer in vim/vimCVE-2022-0351vim · CVSS 8.4 · 0.6% likely

    Vim

  4. Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service VulnerabilityCVE-2026-20058Cisco · CVSS 5.8 · 0.5% likely

    Cisco

  5. Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effo…CVE-2024-5700Mozilla · CVSS 7 · 0.4% likely

    Mozilla

  6. An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, ma…CVE-2024-27831Apple · CVSS 7.5 · 0.3% likely

    Apple

  7. The issue was addressed with improved memory handling. This issue is fixed in iOS 17.5 and iPadOS 17.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. An app may be able to execute arbitr…CVE-2024-27828Apple · CVSS 7 · 0.3% likely

    Apple

  8. The issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Ventura 13.6.7,…CVE-2024-27840Apple · CVSS 7.5 · 0.3% likely

    Apple

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.