CWE-121 · Memory Corruption
Stack-based Buffer Overflow
4,147CVEs
20exploited
0with a public check
81likely (EPSS 10%+)
SortMost likely exploited
4,147 CVEs with CWE-121 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-22457In CISA KEVExploitedA stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, and Ivanti ZTA Gateways before version 22.8R2.2 allow…Ivanti · Connect Secure · CVSS 9 · 2025-04-03 | 9.0 | 100% | 2025-04-03 |
| CVE-2025-0282In CISA KEVExploitedIvanti Connect Secure - Stack-based Buffer OverflowIvanti · Connect Secure · CVSS 9 · 2025-01-08 | 9.0 | 100% | 2025-01-08 |
| CVE-2021-20038In CISA KEVExploitedSonicWall SMA100 Stack - Buffer Overflow/Remote Code ExecutionSonicWall · SonicWall SMA100 · CVSS 9.8 · 2021-12-08 | 9.8 | 100% | 2021-12-08 |
| CVE-2009-0927In CISA KEVExploitedStack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted arg…Adobe · Reader and Acrobat · CVSS 8.8 · 2009-03-19 | 8.8 | 97% | 2009-03-19 |
| CVE-2008-0015In CISA KEVExploitedStack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in Di…Microsoft · Windows · CVSS 8.8 · 2009-07-07 | 8.8 | 77% | 2009-07-07 |
| CVE-2022-20699In CISA KEVExploitedCisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 72% | 2022-02-10 |
| CVE-2014-9163In CISA KEVExploitedStack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to ex…Adobe · Flash Player · CVSS 7.8 · 2014-12-10 | 7.8 | 45% | 2014-12-10 |
| CVE-2025-20352In CISA KEVExploitedA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote atta…Cisco · IOS · CVSS 7.7 · 2025-09-24 | 7.7 | 41% | 2025-09-24 |
| CVE-2020-5735In CISA KEVExploitedAmcrest cameras and NVR are vulnerable to a stack-based buffer overflow over port 37777. An authenticated remote attacker can abuse this issue to crash the device and possibly exe…Amcrest · Amcrest · CVSS 8.8 · 2020-04-08 | 8.8 | 36% | 2020-04-08 |
| CVE-2025-32756In CISA KEVExploitedA stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiM…Fortinet · FortiNDR · CVSS 9.6 · 2025-05-13 | 9.6 | 31% | 2025-05-13 |
| CVE-2018-5002In CISA KEVExploitedAdobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context…Adobe · Adobe Flash Player 29.0.0.171 and earlier versions · CVSS 7.8 · 2018-07-09 | 7.8 | 24% | 2018-07-09 |
| CVE-2022-20708In CISA KEVExploitedCisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 15% | 2022-02-10 |
| CVE-2022-20701In CISA KEVExploitedCisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 9.7% | 2022-02-10 |
| CVE-2022-20703In CISA KEVExploitedCisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 9.2% | 2022-02-10 |
| CVE-2022-20700In CISA KEVExploitedCisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 5.7% | 2022-02-10 |
| CVE-2021-27137In CISA KEVExploitedAn issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality allows an unauthenticated remote attacker to send a r…DD-WRT · DD-WRT · CVSS 8.1 · 2026-07-16 | 8.1 | 4.0% | 2026-07-16 |
| CVE-2025-42599In CISA KEVExploitedActive! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauth…QUALITIA CO., LTD. · Active! mail 6 · CVSS 9.8 · 2025-04-18 | 9.8 | 3.4% | 2025-04-18 |
| CVE-2026-7273In CISA KEVExploitedA stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a LAN-based, unauthenticated attacker to…Zyxel · GS1900-48HPv2 firmware · CVSS 8.8 · 2026-06-16 | 8.8 | 2.7% | 2026-06-16 |
| CVE-2025-53521In CISA KEVExploitedBigIP APM VulnerabilityF5 · BIG-IP · CVSS 9.8 · 2025-10-15 | 9.8 | 2.3% | 2025-10-15 |
| CVE-2013-2597In CISA KEVExploitedStack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) An…Code Aurora · ACDB Audio Driver · CVSS 8.4 · 2014-08-31 | 8.4 | 1.5% | 2014-08-31 |
| CVE-2020-10924This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700 V1.0.4.84_10.0.58 routers. Although authentication is requ…NETGEAR · R6700 · CVSS 8.8 · 2020-07-28 | 8.8 | 87% | 2020-07-28 |
| CVE-2022-20705Cisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 80% | 2022-02-10 |
| CVE-2017-13089GNU Wget: stack overflow in HTTP protocol handlingGNU Project · Wget · CVSS 8.8 · 2017-10-27 | 8.8 | 80% | 2017-10-27 |
| CVE-2016-6563D-Link DIR routers contain a stack-based buffer overflow in the HNAP Login actionD-Link · DIR-823 · 2018-07-13 | – | 80% | 2018-07-13 |
| CVE-2026-41089Windows Netlogon Remote Code Execution VulnerabilityMicrosoft · Windows Server 2012 · CVSS 9.8 · 2026-05-12 | 9.8 | 78% | 2026-05-12 |
| CVE-2022-22274A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker to cause Denial of Service (DoS) or potentially results in cod…SonicWall · SonicOS · 2022-03-25 | – | 76% | 2022-03-25 |
| CVE-2022-20707Cisco Small Business RV Series Routers VulnerabilitiesCisco · Cisco Small Business RV Series Router Firmware · CVSS 10 · 2022-02-10 | 10.0 | 75% | 2022-02-10 |
| CVE-2022-35690Adobe ColdFusion ODBC Agent Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe · ColdFusion · CVSS 9.8 · 2022-10-14 | 9.8 | 73% | 2022-10-14 |
| CVE-2018-10594Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, ES2, SE, SS2 and AHSIM_5x0, AHSIM_5x1) u…ICS-CERT · Delta Industrial Automation COMMGR and accompanying PLC Simulators (DVPSimulato… · 2018-06-26 | – | 68% | 2018-06-26 |
| CVE-2014-0783Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowYokogawa · CENTUM CS 3000 · CVSS 9 · 2014-03-14 | 9.0 | 68% | 2014-03-14 |
| CVE-2021-33549UDP Technology/Geutebrück camera devices: Buffer overflow in action parameter leading to RCEGeutebrück · E2 Series · CVSS 7.2 · 2021-09-13 | 7.2 | 67% | 2021-09-13 |
| CVE-2018-1161This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.2.0.13. Authentication is not required to exploit this…Quest · Quest NetVault Backup · 2018-02-08 | – | 67% | 2018-02-08 |
| CVE-2019-6553A vulnerability was found in Rockwell Automation RSLinx Classic versions 4.10.00 and prior. An input validation issue in a .dll file of RSLinx Classic where the data in a Forward…Rockwell Automation · RSLinx Classic · 2019-04-04 | – | 66% | 2019-04-04 |
| CVE-2014-2364Advantech WebAccess Stack-Based Buffer OverflowAdvantech · WebAccess · CVSS 7.5 · 2014-07-19 | 7.5 | 61% | 2014-07-19 |
| CVE-2023-31419Elasticsearch StackOverflow vulnerabilityElastic · Elasticsearch · CVSS 6.5 · 2023-10-26 | 6.5 | 61% | 2023-10-26 |
| CVE-2021-44703Adobe Acrobat Pro DC Stack Overflow Vulnerability Arbitrary code executionAdobe · Acrobat Reader · CVSS 7.8 · 2022-01-14 | 7.8 | 58% | 2022-01-14 |
| CVE-2014-0782Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowYokogawa · CENTUM CS 3000 · CVSS 8.3 · 2014-05-16 | 8.3 | 57% | 2014-05-16 |
| CVE-2018-20247In Foxit Quick PDF Library (all versions prior to 16.12), issue where loading a malformed or malicious PDF containing a recursive page tree structure using the LoadFromFile, LoadF…Foxitsoftware · Foxit Quick PDF Library · 2018-12-24 | – | 54% | 2018-12-24 |
| CVE-2023-3959Zavio IP Camera Stack-Based Buffer OverflowZavio · IP Camera CF7500 · CVSS 9.8 · 2023-11-08 | 9.8 | 49% | 2023-11-08 |
| CVE-2025-40596A Stack-based buffer overflow vulnerability in the SMA100 series web interface allows remote, unauthenticated attacker to cause Denial of Service (DoS) or potentially results in c…SonicWall · SMA 100 Series · CVSS 7.3 · 2025-07-23 | 7.3 | 45% | 2025-07-23 |
| CVE-2024-26304There is a buffer overflow vulnerability in the underlying L2/L3 Management service that could lead to unauthenticated remote code execution by sending specially crafted packets d…Hewlett Packard Enterprise (HPE) · Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers… · CVSS 9.8 · 2024-05-01 | 9.8 | 44% | 2024-05-01 |
| CVE-2022-35710Adobe ColdFusion ODBC Server Stack-based Buffer Overflow Remote Code Execution VulnerabilityAdobe · ColdFusion · CVSS 9.8 · 2022-10-14 | 9.8 | 43% | 2022-10-14 |
| CVE-2026-2329Grandstream GXP1600 VoIP Phones - Unauthenticated stack buffer overflowGrandstream · GXP1610 · CVSS 9.3 · 2026-02-18 | 9.3 | 42% | 2026-02-18 |
| CVE-2023-0656A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to cra…SonicWall · SonicOS · 2023-03-02 | – | 41% | 2023-03-02 |
| CVE-2014-0784Yokogawa CENTUM CS 3000 Stack-based Buffer OverflowYokogawa · CENTUM CS 3000 · CVSS 8.3 · 2014-03-14 | 8.3 | 36% | 2014-03-14 |
| CVE-2021-42756Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7 and below, 6.1.2 and below, 6.2.6 and below, 6.3.16 and belo…Fortinet · FortiWeb · CVSS 9.3 · 2023-02-16 | 9.3 | 35% | 2023-02-16 |
| CVE-2026-0826Poly Voice – Possible Remote Control of Certain Poly DevicesHP Inc. · poly_trio_8300 · CVSS 9.2 · 2026-06-01 | 9.2 | 32% | 2026-06-01 |
| CVE-2021-21892A stack-based buffer overflow vulnerability exists in the Web Manager FsUnmount functionality of Lantronix PremierWave 2050 8.9.0.0R4 (in QEMU). A specially crafted HTTP request c…Lantronix · Lantronix · CVSS 9.9 · 2021-12-22 | 9.9 | 30% | 2021-12-22 |
| CVE-2021-36301Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploi…Dell · Integrated Dell Remote Access Controller (iDRAC) · CVSS 5.9 · 2021-11-23 | 5.9 | 28% | 2021-11-23 |
| CVE-2019-10193A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By corrupting a hyperlo…Redis Labs · redis · CVSS 7.2 · 2019-07-11 | 7.2 | 23% | 2019-07-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.