CWE-119 · Memory Corruption
Memory Buffer Bounds
12,236CVEs
50exploited
5with a public check
2,119likely (EPSS 10%+)
SortMost likely exploited
12,236 CVEs with CWE-119 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-4966In CISA KEVExploitedCitrix Bleed - Leaking Session TokensCitrix · NetScaler ADC · CVSS 9.4 · 2023-10-10 | 9.4 | 100% | 2023-10-10 |
| CVE-2017-11882In CISA KEVExploitedMicrosoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code…Microsoft Corporation · Microsoft Office · CVSS 7.8 · 2017-11-15 | 7.8 | 100% | 2017-11-15 |
| CVE-2020-0796In CISA KEVExploitedMicrosoft SMBv3 - Remote Code ExecutionMicrosoft · Windows 10 Version 1903 for 32-bit Systems · CVSS 10 · 2020-03-12 | 10.0 | 100% | 2020-03-12 |
| CVE-2008-4250In CISA KEVExploitedThe Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbit…Microsoft · Windows · CVSS 9.8 · 2008-10-23 | 9.8 | 99% | 2008-10-23 |
| CVE-2017-15944In CISA KEVExploitedPalo Alto Network PAN-OS - Remote Code ExecutionPalo Alto Networks · PAN-OS · CVSS 9.8 · 2017-12-11 | 9.8 | 98% | 2017-12-11 |
| CVE-2014-6332In CISA KEVExploitedOleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold an…Microsoft · Windows · CVSS 8.8 · 2014-11-11 | 8.8 | 95% | 2014-11-11 |
| CVE-2010-3765In CISA KEVExploitedMozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is enabled,…Mozilla · Multiple Products · CVSS 9.8 · 2010-10-27 | 9.8 | 83% | 2010-10-27 |
| CVE-2017-11826In CISA KEVExploitedMicrosoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 2013 and 20…Microsoft Corporation · Microsoft Office · CVSS 7.8 · 2017-10-13 | 7.8 | 82% | 2017-10-13 |
| CVE-2026-88772In CISA KEVExploitedMemory overflow vulnerability leading to Remote Code Execution or Denial of ServiceCitrix NetScaler · ADC · CVSS 9.5 · 2026-09-27 | 9.5 | 77% | 2026-09-27 |
| CVE-2017-6736In CISA KEVExploitedThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to re…Cisco · IOS · CVSS 8.8 · 2017-07-17 | 8.8 | 70% | 2017-07-17 |
| CVE-2013-1690In CISA KEVExploitedMozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in…Mozilla · Firefox and Thunderbird · CVSS 8.8 · 2013-06-26 | 8.8 | 69% | 2013-06-26 |
| CVE-2018-7445In CISA KEVExploitedA buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vul…MikroTik · RouterOS · CVSS 9.8 · 2018-03-19 | 9.8 | 66% | 2018-03-19 |
| CVE-2021-22991In CISA KEVExploitedOn BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual serv…F5 · BIG-IP · CVSS 9.8 · 2021-03-31 | 9.8 | 62% | 2021-03-31 |
| CVE-2017-11774In CISA KEVExploitedMicrosoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, a…Microsoft Corporation · Microsoft Outlook · CVSS 7.8 · 2017-10-13 | 7.8 | 60% | 2017-10-13 |
| CVE-2023-6549In CISA KEVExploitedCitrix Netscaler ADC & Gateway - Out-Of-Bounds Memory ReadCloud Software Group · NetScaler ADC · CVSS 8.2 · 2024-01-17 | 8.2 | 58% | 2024-01-17 |
| CVE-2016-7193In CISA KEVExploitedMicrosoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automa…Microsoft · Office · CVSS 7.8 · 2016-10-14 | 7.8 | 58% | 2016-10-14 |
| CVE-2017-0101In CISA KEVExploitedThe kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2, Windows…Microsoft Corporation · Windows · CVSS 7.8 · 2017-03-17 | 7.8 | 57% | 2017-03-17 |
| CVE-2020-29557In CISA KEVExploitedAn issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote…D-Link · DIR-825 R1 Devices · CVSS 9.8 · 2021-01-29 | 9.8 | 56% | 2021-01-29 |
| CVE-2011-1889In CISA KEVExploitedThe NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors involving…Microsoft · Forefront Threat Management Gateway (TMG) · CVSS 9.8 · 2011-06-16 | 9.8 | 49% | 2011-06-16 |
| CVE-2017-6737In CISA KEVExploitedA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could…Cisco · IOS · CVSS 8.8 · 2017-07-17 | 8.8 | 45% | 2017-07-17 |
| CVE-2025-14174In CISA KEVExploitedOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chr…Google · Chrome · CVSS 8.8 · 2025-12-12 | 8.8 | 43% | 2025-12-12 |
| CVE-2013-3660In CISA KEVExploitedThe EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…Microsoft · Win32k · CVSS 7.8 · 2013-05-24 | 7.8 | 39% | 2013-05-24 |
| CVE-2014-3931In CISA KEVExploitedfastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.Looking Glass · Multi-Router Looking Glass (MRLG) · CVSS 9.8 · 2017-03-31 | 9.8 | 29% | 2017-03-31 |
| CVE-2017-6742In CISA KEVExploitedA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could…Cisco · Cisco IOS XE Software · CVSS 8.8 · 2017-07-17 | 8.8 | 21% | 2017-07-17 |
| CVE-2025-31200In CISA KEVExploitedA memory corruption issue was addressed with improved bounds checking. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS 2.4.1, watc…Apple · iOS and iPadOS · CVSS 9.8 · 2025-04-16 | 9.8 | 21% | 2025-04-16 |
| CVE-2025-7775In CISA KEVExploitedMemory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceNetScaler · ADC · CVSS 9.2 · 2025-08-26 | 9.2 | 21% | 2025-08-26 |
| CVE-2017-0022In CISA KEVExploitedMicrosoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 2012 Gold an…Microsoft Corporation · XML Core Services · CVSS 6.5 · 2017-03-17 | 6.5 | 18% | 2017-03-17 |
| CVE-2018-0151In CISA KEVExploitedA vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of serv…Cisco · Cisco IOS and IOS XE · CVSS 9.8 · 2018-03-28 | 9.8 | 14% | 2018-03-28 |
| CVE-2026-88779In CISA KEVExploitedMemory overflow vulnerability leading to Denial of ServiceNetScaler · ADC · CVSS 8.7 · 2026-10-04 | 8.7 | 11% | 2026-10-04 |
| CVE-2017-6740In CISA KEVExploitedThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to re…Cisco · IOS · CVSS 8.8 · 2017-07-17 | 8.8 | 11% | 2017-07-17 |
| CVE-2017-6743In CISA KEVExploitedThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to re…Cisco · IOS · CVSS 8.8 · 2017-07-17 | 8.8 | 11% | 2017-07-17 |
| CVE-2017-6739In CISA KEVExploitedA vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could…IntelliShield · Universal Product · CVSS 8.8 · 2017-07-17 | 8.8 | 11% | 2017-07-17 |
| CVE-2017-6738In CISA KEVExploitedThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to re…Cisco · IOS · CVSS 8.8 · 2017-07-17 | 8.8 | 11% | 2017-07-17 |
| CVE-2017-1000253In CISA KEVExploitedLinux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This ke…Linux · Kernel · CVSS 7.8 · 2017-10-04 | 7.8 | 11% | 2017-10-04 |
| CVE-2025-6543In CISA KEVExploitedMemory overflow vulnerability leading to unintended control flow and Denial of ServiceNetScaler · ADC · CVSS 9.2 · 2025-06-25 | 9.2 | 10% | 2025-06-25 |
| CVE-2015-2546In CISA KEVExploitedThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold…Microsoft · Win32k · CVSS 8.2 · 2015-09-09 | 8.2 | 10% | 2015-09-09 |
| CVE-2012-2034In CISA KEVExploitedAdobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android…Adobe · Flash Player · CVSS 7.5 · 2012-06-09 | 7.5 | 7.7% | 2012-06-09 |
| CVE-2017-6744In CISA KEVExploitedThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to re…Cisco · IOS · CVSS 8.8 · 2017-07-17 | 8.8 | 7.3% | 2017-07-17 |
| CVE-2021-31979In CISA KEVExploitedWindows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2021-07-14 | 7.8 | 4.5% | 2021-07-14 |
| CVE-2018-0175In CISA KEVExploitedFormat String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenti…Cisco · Cisco IOS, IOS XE, and IOS XR · CVSS 8 · 2018-03-28 | 8.0 | 3.5% | 2018-03-28 |
| CVE-2018-0167In CISA KEVExploitedMultiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow…Cisco · Cisco IOS, IOS XE, and IOS XR · CVSS 8.8 · 2018-03-28 | 8.8 | 3.4% | 2018-03-28 |
| CVE-2021-30666In CISA KEVExploitedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.5.3. Processing maliciously crafted web content may lead to arbitrary code execu…Apple · iOS · CVSS 8.8 · 2021-09-08 | 8.8 | 3.0% | 2021-09-08 |
| CVE-2026-3910In CISA KEVExploitedInappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium…Google · Chrome · CVSS 8.8 · 2026-03-12 | 8.8 | 2.7% | 2026-03-12 |
| CVE-2018-4344In CISA KEVExploitedA memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.Apple · iOS, macOS, tvOS, watchOS · CVSS 7.8 · 2019-04-03 | 7.8 | 2.4% | 2019-04-03 |
| CVE-2025-31277In CISA KEVExploitedThe issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS 2.6, watchOS 11.6. Pro…Apple · Safari · CVSS 8.8 · 2025-07-29 | 8.8 | 1.7% | 2025-07-29 |
| CVE-2026-20700In CISA KEVExploitedA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3.…Apple · iOS and iPadOS · CVSS 7.8 · 2026-02-11 | 7.8 | 1.7% | 2026-02-11 |
| CVE-2019-8720In CISA KEVExploitedA vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addr…WebKitGTK · webkitgtk · CVSS 8.8 · 2023-03-06 | 8.8 | 1.6% | 2023-03-06 |
| CVE-2019-1214In CISA KEVExploitedAn elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driv…Microsoft · Windows · CVSS 7.8 · 2019-09-11 | 7.8 | 1.4% | 2019-09-11 |
| CVE-2022-22706In CISA KEVExploitedArm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, an…Arm · Mali Graphics Processing Unit (GPU) · CVSS 7.8 · 2022-03-03 | 7.8 | 1.1% | 2022-03-03 |
| CVE-2026-8452In CISA KEVExploitedMemory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of ServiceNetScaler · ADC · CVSS 8.8 · 2026-06-30 | 8.8 | 1.0% | 2026-06-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.