Skip to content
BackEsc
Sign in

CWE-1260 · weakness in Other weaknesses

Improper Handling of Overlap Between Protected Memory Ranges

19 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

  1. Windows Kernel Elevation of Privilege VulnerabilityCVE-2019-1164Microsoft · CVSS 7.8 · 0.9% likely

    Microsoft

  2. Memory safety bugs fixed in Firefox 136, Thunderbird 136, Firefox ESR 115.21, Firefox ESR 128.8, and Thunderbird 128.8CVE-2025-1937Mozilla · CVSS 7.5 · 0.6% likely

    Mozilla

  3. Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited t…CVE-2024-4778Mozilla · CVSS 9.8 · 0.4% likely

    Mozilla

  4. RealTerm Serial Terminal 2.0.0.70 Denial of Service via Port FieldCVE-2019-25570Realterm · CVSS 5.5 · 0.2% likely
  5. Unconfigured memory protection modules in Motorola MTM5000CVE-2022-27813Motorola · CVSS 8.1 · 0.2% likely

    Motorola

  6. Deluge 1.3.15 Denial of Service via Webseeds FieldCVE-2019-25585Dev · CVSS 6.2 · 0.2% likely
  7. SpotPaltalk 1.1.5 Name/Key Field Denial of ServiceCVE-2019-25559Nsauditor · CVSS 5.5 · 0.2% likely

    Nsauditor

  8. Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to bypass RMP protections, potentially resulting in a loss of SEV-…CVE-2025-29948AMD · CVSS 5.9 · 0.2% likely

    AMD

  9. PHPRunner 10.1 Denial of Service via Dashboard Name FieldCVE-2019-25592Xlinesoft · CVSS 6.2 · 0.2% likely
  10. Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation o…CVE-2025-22889Intel(R) Xeon(R) 6 processor with Intel(R) TDX · CVSS 7.9 · 0.2% likely
  11. VSCO 1.1.1.0 Denial of Service via SearchCVE-2018-25238vsco · CVSS 6.2 · 0.2% likely
  12. NordVPN 6.19.6 Denial of Service via Email Field Buffer OverflowCVE-2019-25572Nordvpn · CVSS 6.2 · 0.2% likely
  13. Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged attacker corrupt or partially infer SMM…CVE-2025-0012AMD · CVSS 6.8 · 0.2% likely

    AMD

  14. Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker to cause misconfigurations in…CVE-2025-54503AMD · CVSS 5.9 · 0.2% likely

    AMD

  15. Watchr 1.1.0.0 Denial of Service via SearchCVE-2018-25240Watchr · CVSS 6.2 · 0.1% likely
  16. GSearch 1.0.1.0 Denial of Service via Search InputCVE-2019-25602GSearch · CVSS 5.5 · 0.1% likely
  17. Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authori…CVE-2026-20760Intel(R) Processors · CVSS 6.8 · 0.1% likely
  18. Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM ad…CVE-2025-31936Intel · CVSS 7 · 0.1% likely

    Intel Corporation

  19. HPE NonStop Kernel - Access to unmapped or privileged dataCVE-2026-76668Hewlett Packard Enterprise · CVSS 6.3 · 0.1% likely

    Hewlett Packard Enterprise

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in