CWE-122 · Heap-based Buffer Overflow

2688 CVEs classified under CWE-122 (Heap-based Buffer Overflow). Browse by severity and year.

Top CVEs for CWE-122
CVE	Severity	Score	Published	Summary
`CVE-2025-23123`	Critical	`10.0`	2025-05-19	A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow vulnerability in the U…
`CVE-2023-45318`	Critical	`10.0`	2024-02-20	A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted network p…
`CVE-2022-34819`	Critical	`10.0`	2022-07-12	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC CP 1243-7 LTE EU (All…
`CVE-2021-21940`	Critical	`10.0`	2021-10-12	A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network…
`CVE-2021-34770`	Critical	`10.0`	2021-09-23	A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Software for Cisco Catalyst 9000 Family…
`CVE-2026-44050`	Critical	`9.9`	2026-05-21	A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker to execute arbitrary…
`CVE-2026-65791`	Critical	`9.8`	2026-08-11	Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
`CVE-2026-67873`	Critical	`9.8`	2026-08-06	A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegment_encode() valida…
`CVE-2017-20241`	Critical	`9.8`	2026-08-04	Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to cra…
`CVE-2026-67191`	Critical	`9.8`	2026-07-29	Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the…
`CVE-2026-55971`	Critical	`9.8`	2026-07-27	Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to…
`CVE-2026-56165`	Critical	`9.8`	2026-07-24	Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network.
`CVE-2026-41252`	Critical	`9.8`	2026-07-20	xrdp is an open source RDP server. Versions 0.10.6 and prior contain a missing bounds check in xrdp, which allows a heap-based buffer overflow when operating i…
`CVE-2026-64620`	Critical	`9.8`	2026-07-20	FreeRDP before 3.28.0 (affected <=3.27.1) contains a heap-based buffer overflow in crypto_rsa_common() (libfreerdp/crypto/crypto.c). The function writes the mo…
`CVE-2026-56159`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
`CVE-2026-55010`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.
`CVE-2026-50518`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
`CVE-2026-50447`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
`CVE-2026-54990`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
`CVE-2026-49172`	Critical	`9.8`	2026-07-14	Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

All CVEs classified under CWE-122 — newest first (page 1 of 27)
CVE	Severity	Score	Published	Summary
`CVE-2026-19970`	Medium	`6.3`	2026-08-17	A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the f…
`CVE-2026-19968`	Medium	`4.3`	2026-08-17	A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in th…
`CVE-2026-19967`	Medium	`6.3`	2026-08-17	A security flaw has been discovered in Open Asset Import Library Assimp 17c12da. Impacted is the function Assimp::Compression::decompressBlock of the file code…
`CVE-2026-72970`	High	`8.3`	2026-08-14	Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
`CVE-2026-19385`	High	`8.8`	2026-08-13	Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user run…
`CVE-2026-14676`	High	`8.8`	2026-08-13	Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via…
`CVE-2026-14670`	High	`8.8`	2026-08-13	Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the da…
`CVE-2026-14669`	High	`8.8`	2026-08-13	Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running t…
`CVE-2026-14664`	High	`8.8`	2026-08-13	Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that wo…
`CVE-2026-18368`			2026-08-13	In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attac…
`CVE-2026-19694`	Medium	`4.7`	2026-08-13	TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service
`CVE-2026-19004`	High	`8.1`	2026-08-12	An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Trigg…
`CVE-2024-14043`	Medium	`6.3`	2026-08-12	A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-pa…
`CVE-2026-73242`			2026-08-11	FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos_DecryptMessage fun…
`CVE-2026-71331`	High	`8.1`	2026-08-11	Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to execute code ove…
`CVE-2026-70347`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
`CVE-2026-70345`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
`CVE-2026-70330`	Medium	`6.7`	2026-08-11	Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-70304`	Medium	`6.7`	2026-08-11	Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-70130`	High	`8.4`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-68815`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68812`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68807`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68805`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68804`	High	`7.8`	2026-08-11	Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68801`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68800`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68798`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68796`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-68794`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
`CVE-2026-66810`	Medium	`5.5`	2026-08-11	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
`CVE-2026-66799`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
`CVE-2026-65814`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
`CVE-2026-65799`	Medium	`6.7`	2026-08-11	Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-65797`	Medium	`6.7`	2026-08-11	Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-65796`	High	`8.1`	2026-08-11	Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
`CVE-2026-65791`	Critical	`9.8`	2026-08-11	Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
`CVE-2026-65790`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
`CVE-2026-65787`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
`CVE-2026-65786`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
`CVE-2026-65774`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
`CVE-2026-65679`	High	`8.1`	2026-08-11	Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
`CVE-2026-65672`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
`CVE-2026-65671`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
`CVE-2026-65664`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-65661`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-64920`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
`CVE-2026-64915`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
`CVE-2026-64914`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
`CVE-2026-64911`	High	`7.8`	2026-08-11	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-64909`	High	`7.8`	2026-08-11	Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-64908`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
`CVE-2026-64906`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
`CVE-2026-64903`	High	`7.8`	2026-08-11	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-64898`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-63533`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-63532`	High	`7.8`	2026-08-11	Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-63519`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-63518`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
`CVE-2026-63513`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
`CVE-2026-62913`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
`CVE-2026-62894`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
`CVE-2026-62890`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
`CVE-2026-62886`	High	`7.8`	2026-08-11	Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
`CVE-2026-62885`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
`CVE-2026-62883`	Medium	`6.7`	2026-08-11	Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-62881`	Medium	`6.7`	2026-08-11	Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-62871`	High	`7.8`	2026-08-11	Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
`CVE-2026-62823`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
`CVE-2026-62822`	High	`8.8`	2026-08-11	Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
`CVE-2026-62816`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
`CVE-2026-62811`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
`CVE-2026-62800`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
`CVE-2026-62799`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
`CVE-2026-62797`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
`CVE-2026-62790`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
`CVE-2026-62785`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
`CVE-2026-62784`	High	`8.8`	2026-08-11	Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
`CVE-2026-62783`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
`CVE-2026-62781`	High	`8.1`	2026-08-11	Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
`CVE-2026-62772`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
`CVE-2026-62771`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
`CVE-2026-62770`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
`CVE-2026-62769`	Medium	`6.7`	2026-08-11	Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
`CVE-2026-62758`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
`CVE-2026-62754`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
`CVE-2026-62753`	High	`7.0`	2026-08-11	Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
`CVE-2026-62752`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
`CVE-2026-62747`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
`CVE-2026-62741`	High	`7.8`	2026-08-11	Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
`CVE-2026-62739`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
`CVE-2026-62736`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
`CVE-2026-62735`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
`CVE-2026-62732`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
`CVE-2026-62722`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
`CVE-2026-62719`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
`CVE-2026-62717`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
`CVE-2026-62713`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
`CVE-2026-62712`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
`CVE-2026-62710`	High	`7.8`	2026-08-11	Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.