CWE-244 · Memory Corruption
Improper Clearing of Heap Memory Before Release
22CVEs
SortMost likely exploited
22 CVEs with CWE-244 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-20349In CISA KEVExploitedCisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2026-08-11 | 8.6 | 1.0% | 2026-08-11 |
| CVE-2022-20943Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote att…Cisco · Cisco Firepower Threat Defense Software · CVSS 5.8 · 2022-11-10 | 5.8 | 1.1% | 2022-11-10 |
| CVE-2022-20922Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote att…Cisco · Cisco Firepower Threat Defense Software · CVSS 5.8 · 2022-11-10 | 5.8 | 0.9% | 2022-11-10 |
| CVE-2023-20070A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection e…Cisco · Cisco Firepower Threat Defense Software · CVSS 4 · 2023-11-01 | 4.0 | 0.7% | 2023-11-01 |
| CVE-2023-20177A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured with a URL Category an…Cisco · Cisco Firepower Threat Defense Software · CVSS 4 · 2023-11-01 | 4.0 | 0.7% | 2023-11-01 |
| CVE-2026-48025nebula-mesh: Decrypted CA private key persists in heap after signingjuev · nebula-mesh · CVSS 6.9 · 2026-07-28 | 6.9 | 0.5% | 2026-07-28 |
| CVE-2025-70873An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafte…Sqlite · Sqlite · CVSS 7.5 · 2026-03-12 | 7.5 | 0.5% | 2026-03-12 |
| CVE-2025-5105TOZED ZLT W51 Service Port 7777 heap inspectionTOZED · ZLT W51 · CVSS 7.3 · 2025-05-23 | 7.3 | 0.5% | 2025-05-23 |
| CVE-2026-20039Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service VulnerabilityCisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software · CVSS 8.6 · 2026-03-04 | 8.6 | 0.4% | 2026-03-04 |
| CVE-2025-1722Multiple Vulnerabilities in IBM Concert SoftwareIBM · Concert · CVSS 5.9 · 2026-01-20 | 5.9 | 0.4% | 2026-01-20 |
| CVE-2025-1719Multiple Vulnerabilities in IBM Concert SoftwareIBM · Concert · CVSS 5.9 · 2026-01-20 | 5.9 | 0.4% | 2026-01-20 |
| CVE-2025-26305A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.Libming · Libming · CVSS 8.2 · 2025-02-20 | 8.2 | 0.4% | 2025-02-20 |
| CVE-2025-26304A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.Libming · Libming · CVSS 8.2 · 2025-02-20 | 8.2 | 0.4% | 2025-02-20 |
| CVE-2025-36118IBM Storage Virtualize Information DisclosureIBM · Storage Virtualize · CVSS 7.5 · 2025-11-17 | 7.5 | 0.4% | 2025-11-17 |
| CVE-2025-45663An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.Netsurf-Browser · Netsurf · CVSS 6.5 · 2025-11-03 | 6.5 | 0.4% | 2025-11-03 |
| CVE-2023-20031A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remo…Cisco · Cisco Firepower Threat Defense Software · CVSS 4 · 2023-11-01 | 4.0 | 0.4% | 2023-11-01 |
| CVE-2025-1759IBM Concert Software information disclosureIBM · Concert Software · CVSS 5.9 · 2025-08-18 | 5.9 | 0.4% | 2025-08-18 |
| CVE-2025-1721BM Concert Software Improper Clearing of Heap Memory Before Release.IBM · Concert · CVSS 5.9 · 2025-12-26 | 5.9 | 0.3% | 2025-12-26 |
| CVE-2025-33101Multiple Vulnerabilities in IBM Concert Software.IBM · Concert · CVSS 5.9 · 2026-02-17 | 5.9 | 0.2% | 2026-02-17 |
| CVE-2025-33013IBM MQ Operator information disclosureIBM · MQ Operator · CVSS 6.2 · 2025-07-24 | 6.2 | 0.2% | 2025-07-24 |
| CVE-2026-1510IBM Concert Software Improper Clearing of Heap MemoryIBM · Concert · CVSS 4.7 · 2026-10-19 | 4.7 | 0.1% | 2026-10-19 |
| CVE-2025-36083Multiple Vulnerabilities in IBM Concert Software.IBM · Concert Software · CVSS 6.2 · 2025-10-28 | 6.2 | 0.1% | 2025-10-28 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.