CWE-120: Classic buffer overflow
4,573 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 24 of them as exploited in the wild.
- Published CVEs
- 4,573
- Last 12 months
- 951
- Critical
- 893
- Known exploited
- 24
Critical 893High 2,431Medium 1,160Low 88Not scored 1
CVEs per yearBy the year they were published
- 20156
- 201616
- 201740
- 201861
- 2019112
- 2020391
- 2021418
- 2022459
- 2023607
- 2024679
- 2025828
- 2026865
Known exploitedNewest addition to KEV first
- CVE-2025-43520
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…
Apple · iOS and iPadOS
ExploitedMedium5.5 - CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2022-37055
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
Product not named
ExploitedCritical9.8 - CVE-2025-20333
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
ExploitedCritical9.9 - CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix…
Product not named
ExploitedCritical9.8 - CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura…
Apple · macOS
ExploitedHigh7.8 - CVE-2023-33009
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions…
Zyxel · ATP series firmware
ExploitedCritical9.8 - CVE-2023-33010
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware…
Zyxel · ATP series firmware
ExploitedCritical9.8 - CVE-2021-30983
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2017-6862
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code…
NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42
ExploitedCritical9.8
Newest CVEs
- CVE-2026-124563
D-Link DIR-878 HNAP SetWanSettings buffer overflow
D-Link · DIR-878
High8.7 - CVE-2026-124562
D-Link DIR-878 HNAP SetWanSettings buffer overflow
D-Link · DIR-878
High8.7 - CVE-2026-124060
TOTOLINK CA300-PoE cstecgi.cgi UploadCustomModule buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-124059
TOTOLINK CA300-PoE cstecgi.cgi setWiFiWdsAddConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-124058
TOTOLINK CA300-PoE cstecgi.cgi setWiFiRepeaterConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-124057
TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123961
TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123960
TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123959
TOTOLINK CA300-PoE cstecgi.cgi setLanguageCfg buffer overflow
TOTOLINK · CA300-PoE
Critical9.4 - CVE-2026-123958
TOTOLINK CA300-PoE cstecgi.cgi setLanConfig buffer overflow
TOTOLINK · CA300-PoE
Critical9.4