CWE-122: Heap-based buffer overflow

CVEs per yearBy the year they were published

1. 20152
2. 20162
3. 20177
4. 201845
5. 201968
6. 202054
7. 2021131
8. 2022188
9. 2023256
10. 2024528
11. 2025543
12. 20261,905

Known exploitedNewest addition to KEV first

• CVE-2026-94127

  BIG-IP APM OAuth vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2025-25249

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…

  Fortinet · FortiSwitchManager

  ExploitedHigh7.4
• CVE-2026-85880

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1607

  ExploitedHigh7.8
• CVE-2026-53362

  ipv6: account for fraggap on the paged allocation path

  Linux · Linux

  ExploitedHigh7.8
• CVE-2009-3459

  Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code…

  Product not named

  ExploitedHigh8.8
• CVE-2025-24993

  Windows NTFS Remote Code Execution Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8
• CVE-2025-24985

  Windows Fast FAT File System Driver Remote Code Execution Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8
• CVE-2025-21418

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8
• CVE-2025-21333

  Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 21H2

  ExploitedHigh7.8
• CVE-2024-49138

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8

Newest CVEs

• CVE-2026-123614

  imgproxy 4.0.0 before 4.0.16 Heap Buffer Overflow via ICO Loader Integer Overflow

  imgproxy · imgproxy

  Critical9.3
• CVE-2026-123966

  Tenda AC19 saveParentControlInfo heap-based overflow

  Tenda · AC19

  Critical10.0
• CVE-2026-77709

  A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication client, which in specific conditions…

  SonicWall · SonicOS

  Medium5.9
• CVE-2026-82308

  A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially enable a remote…

  SonicWall · SonicOS

  High7.5
• CVE-2026-119923

  Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

  AWS · babelfish-for-postgresql

  Critical9.3
• CVE-2026-116788

  FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding

  signalwire · freeswitch

  High8.2
• CVE-2026-116785

  FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling

  signalwire · freeswitch

  Critical9.1
• CVE-2026-123205

  accel-ppp before 1.15.0 Heap-based Buffer Overflow via oversized log lines in log_tcp/log_syslog/log_pgsql

  accel-ppp · accel-ppp

  High8.3
• CVE-2026-54914

  WebAssembly Micro Runtime: Heap Buffer Overflow in WAMR WASI poll_oneoff Output Buffer

  bytecodealliance · wasm-micro-runtime

  High8.3
• CVE-2026-112109

  Local privilege escalation in SafeNet Authentication Client SACSrv

  Thalesgroup · Safenet Authentication Client Service

  High7.3

Vendors it comes up for most

1. Microsoft1,431
2. Adobe215
3. Google175
4. vim64
5. Siemens63
6. Red Hat62
7. FreeRDP37
8. ImageMagick31
9. Wireshark Foundation30
10. Samsung Mobile29