CWE-120 · Memory Corruption
Classic Buffer Overflow
4,419CVEs
23exploited
2with a public check
118likely (EPSS 10%+)
SortMost likely exploited
4,419 CVEs with CWE-120 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-7269In CISA KEVExploitedWindows Server 2003 & IIS 6.0 - Remote Code ExecutionMicrosoft · Internet Information Services (IIS) · CVSS 9.8 · 2017-03-27 | 9.8 | 100% | 2017-03-27 |
| CVE-2019-11043In CISA KEVExploitedPHP-FPM Path Info Buffer Underflow - Remote Code ExecutionPHP · PHP · CVSS 8.7 · 2019-10-28 | 8.7 | 100% | 2019-10-28 |
| CVE-2016-6366In CISA KEVExploitedBuffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Modu…Cisco · Adaptive Security Appliance (ASA) · CVSS 8.8 · 2016-08-18 | 8.8 | 88% | 2016-08-18 |
| CVE-2007-5659In CISA KEVExploitedMultiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScri…Adobe · Acrobat and Reader · CVSS 7.8 · 2008-02-12 | 7.8 | 87% | 2008-02-12 |
| CVE-2016-10174In CISA KEVExploitedThe NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be exploited b…NETGEAR · WNR2000v5 Router · CVSS 9.8 · 2017-01-30 | 9.8 | 83% | 2017-01-30 |
| CVE-2018-6789In CISA KEVExploitedAn issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be used to exe…Exim · Exim · CVSS 9.8 · 2018-02-08 | 9.8 | 82% | 2018-02-08 |
| CVE-2013-1331In CISA KEVExploitedBuffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to impro…Microsoft · Office · CVSS 7.8 · 2013-06-12 | 7.8 | 80% | 2013-06-12 |
| CVE-2025-20333In CISA KEVExploitedA vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an au…Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 9.9 · 2025-09-25 | 9.9 | 72% | 2025-09-25 |
| CVE-2020-15999In CISA KEVExploitedHeap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Google · Chrome · CVSS 9.6 · 2020-11-03 | 9.6 | 64% | 2020-11-03 |
| CVE-2010-2572In CISA KEVExploitedBuffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Parsing Buffe…Microsoft · PowerPoint · CVSS 7.8 · 2010-11-10 | 7.8 | 59% | 2010-11-10 |
| CVE-2022-37055In CISA KEVExploitedD-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,D-Link · Routers · CVSS 9.8 · 2022-08-28 | 9.8 | 57% | 2022-08-28 |
| CVE-2023-41064In CISA KEVExploitedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura 13.5.2, iOS 15.7.9 a…Apple · macOS · CVSS 7.8 · 2023-09-07 | 7.8 | 53% | 2023-09-07 |
| CVE-2006-2492In CISA KEVExploitedBuffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute ar…Microsoft · Word · CVSS 8.8 · 2006-05-20 | 8.8 | 48% | 2006-05-20 |
| CVE-2017-6862In CISA KEVExploitedNETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution via a buf…NETGEAR · NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5… · CVSS 9.8 · 2017-05-26 | 9.8 | 46% | 2017-05-26 |
| CVE-2016-0099In CISA KEVExploitedThe Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Wi…Microsoft · Windows · CVSS 7.8 · 2016-03-09 | 7.8 | 37% | 2016-03-09 |
| CVE-2013-0641In CISA KEVExploitedBuffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF docum…Adobe · Reader · CVSS 7.8 · 2013-02-14 | 7.8 | 32% | 2013-02-14 |
| CVE-2023-33010In CISA KEVExploitedA buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36…Zyxel · ATP series firmware · CVSS 9.8 · 2023-05-24 | 9.8 | 29% | 2023-05-24 |
| CVE-2023-33009In CISA KEVExploitedA buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 P…Zyxel · ATP series firmware · CVSS 9.8 · 2023-05-24 | 9.8 | 28% | 2023-05-24 |
| CVE-2020-5135In CISA KEVExploitedA buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the f…SonicWall · SonicOS · CVSS 9.8 · 2020-10-12 | 9.8 | 27% | 2020-10-12 |
| CVE-2020-15069In CISA KEVExploitedSophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix HF062020.1 was publish…Sophos · XG Firewall · CVSS 9.8 · 2020-06-29 | 9.8 | 11% | 2020-06-29 |
| CVE-2004-0210In CISA KEVExploitedThe POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and c…Microsoft · Windows · CVSS 7.8 · 2004-07-14 | 7.8 | 7.2% | 2004-07-14 |
| CVE-2021-30983In CISA KEVExploitedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute arbitrary code with ker…Apple · iOS and iPadOS · CVSS 7.8 · 2021-08-24 | 7.8 | 2.9% | 2021-08-24 |
| CVE-2025-43520In CISA KEVExploitedA memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Sequoia 15.7.2, macOS S…Apple · iOS and iPadOS · CVSS 5.5 · 2025-12-12 | 5.5 | 0.4% | 2025-12-12 |
| CVE-2020-11984CheckApache HTTP Server - Remote Code ExecutionApache · Apache HTTP Server · 2020-08-07 | – | 90% | 2020-08-07 |
| CVE-2009-0884CheckFileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoSFilezilla-Project · Filezilla Server · 2009-03-12 | – | 3.4% | 2009-03-12 |
| CVE-2014-0195The dtls1_reassemble_fragment function in d1_both.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly validate fragment lengths in DTLS Cli…Openssl · Openssl · 2014-06-05 | – | 100% | 2014-06-05 |
| CVE-2011-4862Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU…Gnu · Inetutils · 2011-12-25 | – | 95% | 2011-12-25 |
| CVE-2022-3786X.509 Email Address Variable Length Buffer OverflowOpenSSL · OpenSSL · CVSS 7.5 · 2022-11-01 | 7.5 | 92% | 2022-11-01 |
| CVE-2009-3023Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST…Microsoft · Internet Information Server · 2009-08-31 | – | 91% | 2009-08-31 |
| CVE-2021-3711SM2 Decryption Buffer OverflowOpenSSL · OpenSSL · 2021-08-24 | – | 88% | 2021-08-24 |
| CVE-2019-12257Wind River VxWorks 6.6 through 6.9 has a Buffer Overflow in the DHCP client component. There is an IPNET security vulnerability: Heap overflow in DHCP Offer/ACK parsing inside ipd…Windriver · Vxworks · 2019-08-09 | – | 84% | 2019-08-09 |
| CVE-2012-2763Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrar…Gimp · Gimp · 2012-07-12 | – | 82% | 2012-07-12 |
| CVE-2023-46847Squid: denial of service in http digest authenticationRed Hat · Red Hat Enterprise Linux 6 Extended Lifecycle Support · CVSS 8.6 · 2023-11-03 | 8.6 | 79% | 2023-11-03 |
| CVE-2020-8012CA Unified Infrastructure Management (Nimsoft/UIM) 20.1, 20.3.x, and 9.20 and below contains a buffer overflow vulnerability in the robot (controller) component. A remote attacker…CA Technologies - A Broadcom Company · CA Unified Infrastructure Management (Nimsoft/UIM) · 2020-02-18 | – | 77% | 2020-02-18 |
| CVE-2019-12255Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.Windriver · Vxworks · 2019-08-09 | – | 75% | 2019-08-09 |
| CVE-2020-10188utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the ne…Netkit Telnet Project · Netkit Telnet · 2020-03-06 | – | 74% | 2020-03-06 |
| CVE-2002-1337Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments…Sendmail · Sendmail · 2004-09-01 | – | 73% | 2004-09-01 |
| CVE-2019-16724File Sharing Wizard 1.5.0 allows a remote attacker to obtain arbitrary code execution by exploiting a Structured Exception Handler (SEH) based buffer overflow in an HTTP POST para…Upredsun · File Sharing Wizard · 2019-09-24 | – | 72% | 2019-09-24 |
| CVE-2021-22908A buffer overflow vulnerability exists in Windows File Resource Profiles in 9.X allows a remote authenticated user with privileges to browse SMB shares to execute arbitrary code a…Ivanti · Pulse Connect Secure · 2021-05-27 | – | 69% | 2021-05-27 |
| CVE-2021-22992On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, a malicious HT…F5 · BIG-IP Advanced WAF and BIG-IP ASM · 2021-03-31 | – | 68% | 2021-03-31 |
| CVE-2023-25076A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80df9b7b345cc9eba55df74a07b498819ba). A sp…SNIProxy · SNIProxy · CVSS 9.8 · 2023-03-30 | 9.8 | 66% | 2023-03-30 |
| CVE-2020-8625A vulnerability in BIND's GSSAPI security policy negotiation can be targeted by a buffer overflow attackISC · BIND9 · CVSS 8.1 · 2021-02-17 | 8.1 | 65% | 2021-02-17 |
| CVE-2017-15222Buffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute arbitrary code.Nftp Project · Nftp · 2017-10-24 | – | 60% | 2017-10-24 |
| CVE-2023-28502Stack buffer overflow in UniRPC's udadmin_server serviceRocket Software · UniData · CVSS 9.8 · 2023-03-29 | 9.8 | 60% | 2023-03-29 |
| CVE-2020-24336An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in th…Contiki-Ng · Contiki-Ng · 2020-12-11 | – | 59% | 2020-12-11 |
| CVE-2022-31626mysqlnd/pdo password buffer overflowPHP Group · PHP · CVSS 7.5 · 2022-06-16 | 7.5 | 58% | 2022-06-16 |
| CVE-1999-0046Buffer overflow of rlogin program using TERM environmental variable.Bsdi · Bsd Os · 1999-09-29 | – | 52% | 1999-09-29 |
| CVE-2019-12518Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.Anviz · Crosschex · 2019-12-02 | – | 51% | 2019-12-02 |
| CVE-2021-33035Buffer overflow from a crafted DBF fileApache Software Foundation · Apache OpenOffice · 2021-09-23 | – | 51% | 2021-09-23 |
| CVE-2009-0182Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL…Vuplayer · Vuplayer · 2009-01-20 | – | 48% | 2009-01-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.