CWE-122 · Memory Corruption
Heap-based Buffer Overflow
3,923CVEs
20exploited
0with a public check
60likely (EPSS 10%+)
SortMost likely exploited
3,923 CVEs with CWE-122 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2015-3113In CISA KEVExploitedHeap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attac…Adobe · Flash Player · CVSS 7.8 · 2015-06-23 | 7.8 | 100% | 2015-06-23 |
| CVE-2023-27997In CISA KEVExploitedA heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProx…Fortinet · FortiOS-6K7K · CVSS 9.2 · 2023-06-13 | 9.2 | 87% | 2023-06-13 |
| CVE-2009-3459In CISA KEVExploitedHeap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a crafted PDF f…Adobe · Acrobat and Reader · CVSS 8.8 · 2009-10-13 | 8.8 | 87% | 2009-10-13 |
| CVE-2021-21017In CISA KEVExploitedAcrobat Reader DC Heap-based Buffer Overflow Vulnerability Could Lead To Arbitrary Code ExecutionAdobe · Acrobat Reader · CVSS 8.8 · 2021-02-11 | 8.8 | 86% | 2021-02-11 |
| CVE-2023-4911In CISA KEVExploitedGlibc: buffer overflow in ld.so leading to privilege escalationSiemens · glibc · CVSS 7.8 · 2023-10-03 | 7.8 | 64% | 2023-10-03 |
| CVE-2024-38812In CISA KEVExploitedHeap-overflow vulnerabilityVMware · VMware vCenter Server · CVSS 9.8 · 2024-09-17 | 9.8 | 55% | 2024-09-17 |
| CVE-2023-28252In CISA KEVExploitedWindows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-04-11 | 7.8 | 49% | 2023-04-11 |
| CVE-2019-3568In CISA KEVExploitedA buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via specially crafted series of RTCP packets sent to a target phone number. The issue affects…Facebook · WhatsApp for Android · CVSS 9.8 · 2019-05-14 | 9.8 | 30% | 2019-05-14 |
| CVE-2026-94127In CISA KEVExploitedBIG-IP APM OAuth vulnerabilityF5 · BIG-IP · CVSS 9.8 · 2026-09-22 | 9.8 | 27% | 2026-09-22 |
| CVE-2024-49138In CISA KEVExploitedWindows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2024-12-10 | 7.8 | 26% | 2024-12-10 |
| CVE-2023-36036In CISA KEVExploitedWindows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-11-14 | 7.8 | 17% | 2023-11-14 |
| CVE-2023-23376In CISA KEVExploitedWindows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2023-02-14 | 7.8 | 11% | 2023-02-14 |
| CVE-2025-21333In CISA KEVExploitedWindows Hyper-V NT Kernel Integration VSP Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 21H2 · CVSS 7.8 · 2025-01-14 | 7.8 | 10% | 2025-01-14 |
| CVE-2020-16010In CISA KEVExploitedHeap buffer overflow in UI in Google Chrome on Android prior to 86.0.4240.185 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox e…Google · Chrome · CVSS 9.6 · 2020-11-03 | 9.6 | 6.4% | 2020-11-03 |
| CVE-2024-30051In CISA KEVExploitedWindows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-05-14 | 7.8 | 6.2% | 2024-05-14 |
| CVE-2025-25249In CISA KEVExploitedA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiO…Fortinet · FortiSwitchManager · CVSS 7.4 · 2026-01-13 | 7.4 | 3.7% | 2026-01-13 |
| CVE-2025-24993In CISA KEVExploitedWindows NTFS Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-03-11 | 7.8 | 2.2% | 2025-03-11 |
| CVE-2025-21418In CISA KEVExploitedWindows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-02-11 | 7.8 | 2.1% | 2025-02-11 |
| CVE-2026-53362In CISA KEVExploitedipv6: account for fraggap on the paged allocation pathLinux · Linux · CVSS 7.8 · 2026-07-04 | 7.8 | 0.7% | 2026-07-04 |
| CVE-2026-85880In CISA KEVExploitedWindows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.8 · 2026-09-08 | 7.8 | 0.4% | 2026-09-08 |
| CVE-2020-25687A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. Th…Thekelleys · dnsmasq · 2021-01-20 | – | 89% | 2021-01-20 |
| CVE-2020-25683A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A…Thekelleys · dnsmasq · 2021-01-20 | – | 89% | 2021-01-20 |
| CVE-2024-26256Libarchive Remote Code Execution VulnerabilityMicrosoft · Windows 11 version 22H2 · CVSS 7.8 · 2024-04-09 | 7.8 | 88% | 2024-04-09 |
| CVE-2024-38077Windows Remote Desktop Licensing Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 9.8 · 2024-07-09 | 9.8 | 84% | 2024-07-09 |
| CVE-2020-25681A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the ne…Thekelleys · dnsmasq · 2021-01-20 | – | 84% | 2021-01-20 |
| CVE-2023-36824Heap overflow in COMMAND GETKEYS and ACL evaluation in Redisredis · redis · CVSS 7.4 · 2023-07-11 | 7.4 | 77% | 2023-07-11 |
| CVE-2020-6146An exploitable code execution vulnerability exists in the rendering functionality of Nitro Pro 13.13.2.242 and 13.16.2.300. When drawing the contents of a page and selecting the s…Gonitro · Nitro Pro · CVSS 8.8 · 2020-09-16 | 8.8 | 75% | 2020-09-16 |
| CVE-2020-25682A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data.…Thekelleys · dnsmasq · 2021-01-20 | – | 75% | 2021-01-20 |
| CVE-2022-35711Adobe ColdFusion ODBC Server Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe · ColdFusion · CVSS 9.8 · 2022-10-14 | 9.8 | 74% | 2022-10-14 |
| CVE-2024-12084Rsync: heap buffer overflow in rsync due to improper checksum length handlingRedhat · rsync · CVSS 9.8 · 2025-01-15 | 9.8 | 73% | 2025-01-15 |
| CVE-2024-20697Windows libarchive Remote Code Execution VulnerabilityMicrosoft · Windows 11 version 22H2 · CVSS 7.3 · 2024-01-09 | 7.3 | 72% | 2024-01-09 |
| CVE-2023-0210A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.Linux · Linux Kernel · 2023-03-27 | – | 72% | 2023-03-27 |
| CVE-2021-26691Apache HTTP Server mod_session response handling heap overflowApache Software Foundation · Apache HTTP Server · 2021-06-10 | – | 68% | 2021-06-10 |
| CVE-2026-42945NGINX ngx_http_rewrite_module vulnerabilityF5 · NGINX Plus · CVSS 8.1 · 2026-05-13 | 8.1 | 68% | 2026-05-13 |
| CVE-2021-28560Adobe Acrobat Reader heap corruption vulnerability could lead to arbitrary code executionAdobe · Acrobat Reader · CVSS 8.8 · 2021-09-02 | 8.8 | 67% | 2021-09-02 |
| CVE-2023-44442GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityGIMP · GIMP · CVSS 7.8 · 2024-05-03 | 7.8 | 61% | 2024-05-03 |
| CVE-2024-10525Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callbackEclipse Foundation · mosquitto · CVSS 7.2 · 2024-10-30 | 7.2 | 59% | 2024-10-30 |
| CVE-2020-24435Acrobat Reader DC Heap-based Buffer Overflow Could Lead to Arbitrary Code ExecutionAdobe · Acrobat Reader · CVSS 7.8 · 2020-11-05 | 7.8 | 53% | 2020-11-05 |
| CVE-2019-5436A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.curl · curl · CVSS 7.8 · 2019-05-28 | 7.8 | 50% | 2019-05-28 |
| CVE-2023-33133Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 7.8 · 2023-06-13 | 7.8 | 44% | 2023-06-13 |
| CVE-2022-24834Heap overflow issue with the Lua cjson library used by Redisredis · redis · CVSS 7 · 2023-07-13 | 7.0 | 41% | 2023-07-13 |
| CVE-2025-47981SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 9.8 · 2025-07-08 | 9.8 | 41% | 2025-07-08 |
| CVE-2022-35712Adobe ColdFusion ODBC Agent Heap-based Buffer Overflow Remote Code Execution VulnerabilityAdobe · ColdFusion · CVSS 9.8 · 2022-10-14 | 9.8 | 38% | 2022-10-14 |
| CVE-2021-44708Adobe Acrobat Pro DC Heap Overflow could lead to Arbitrary code executionAdobe · Acrobat Reader · CVSS 7.8 · 2022-01-14 | 7.8 | 38% | 2022-01-14 |
| CVE-2023-28231DHCP Server Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 8.8 · 2023-04-11 | 8.8 | 37% | 2023-04-11 |
| CVE-2017-13090GNU Wget: heap overflow in HTTP protocol handlingGNU Project · Wget · CVSS 8.8 · 2017-10-27 | 8.8 | 37% | 2017-10-27 |
| CVE-2024-24996A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary commands.Ivanti · Avalanche · CVSS 9.8 · 2024-04-19 | 9.8 | 32% | 2024-04-19 |
| CVE-2021-44709Adobe Acrobat Pro DC Heap Overflow Vulnerability could lead to Arbitrary code executionAdobe · Acrobat Reader · CVSS 7.8 · 2022-01-14 | 7.8 | 28% | 2022-01-14 |
| CVE-2023-21690Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 9.8 · 2023-02-14 | 9.8 | 28% | 2023-02-14 |
| CVE-2023-44441GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityGIMP · GIMP · CVSS 7.8 · 2024-05-03 | 7.8 | 27% | 2024-05-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.