CWE-119: Memory buffer bounds error
14,736 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 59 of them as exploited in the wild.
- Published CVEs
- 14,736
- Last 12 months
- 1,622
- Critical
- 1,526
- Known exploited
- 59
Critical 1,526High 9,485Medium 3,555Low 170Not scored 0
CVEs per yearBy the year they were published
- 2015963
- 20161,036
- 20172,115
- 20181,010
- 2019481
- 2020186
- 2021296
- 2022340
- 2023231
- 2024294
- 20251,157
- 20261,506
Known exploitedNewest addition to KEV first
- CVE-2026-88779
Memory overflow vulnerability leading to Denial of Service
NetScaler · ADC
ExploitedHigh8.7 - CVE-2026-88772
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
Citrix NetScaler · ADC
ExploitedCritical9.5 - CVE-2026-8452
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
NetScaler · ADC
ExploitedHigh8.8 - CVE-2009-3459
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code…
Product not named
ExploitedHigh8.8 - CVE-2008-4250
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote…
Product not named
ExploitedCritical9.8 - CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2026-3910
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…
Google · Chrome
ExploitedHigh8.8 - CVE-2008-0015
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control…
Product not named
ExploitedHigh8.8 - CVE-2026-20700
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2025-14174
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a…
Google · Chrome
ExploitedHigh8.8
Newest CVEs
- CVE-2026-124060
TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-124059
TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-124058
TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-124057
TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123966
Tenda AC19 saveParentControlInfo heap-based overflow
Tenda · AC19
Critical10.0 - CVE-2026-123961
TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123960
TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123959
TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123958
TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123957
TOTOLINK CA300-PoE cstecgi.cgi setIpQosRules buffer overflow
TOTOLINK · CA300-PoE
Critical9.4