CWE-787: Out-of-bounds write
15,501 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 167 of them as exploited in the wild.
- Published CVEs
- 15,501
- Last 12 months
- 2,448
- Critical
- 2,459
- Known exploited
- 167
Critical 2,459High 9,593Medium 3,281Low 160Not scored 8
CVEs per yearBy the year they were published
- 201521
- 2016175
- 2017263
- 2018863
- 20191,294
- 20201,390
- 20211,608
- 20222,243
- 20231,984
- 20242,017
- 20251,173
- 20262,303
Known exploitedNewest addition to KEV first
- CVE-2026-46300
net: skbuff: preserve shared-frag marker during coalescing
Linux · Linux
ExploitedHigh7.8 - CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder
Google · Brotli
ExploitedCritical9.2 - CVE-2026-86950
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 18.7.11 and iPadOS 18.7.11, iOS 26.7.1 and iPadOS 26.7.1,…
Apple · iOS and iPadOS
ExploitedHigh8.8 - CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
Linux · Linux
ExploitedHigh8.8 - CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML…
Google · Chrome
ExploitedHigh8.8 - CVE-2025-25249
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…
Fortinet · FortiSwitchManager
ExploitedHigh7.4 - CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
Linux · Linux
ExploitedHigh7.8 - CVE-2022-0995
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel…
kernel
ExploitedHigh7.8 - CVE-2026-11645
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…
Google · Chrome
ExploitedHigh8.8 - CVE-2026-0300
PAN-OS: Unauthenticated user initiated Buffer Overflow Vulnerability in User-ID™ Authentication Portal
Palo Alto Networks · Cloud NGFW
ExploitedCritical9.3
Newest CVEs
- CVE-2026-116501
Qiskit SDK C API may trigger an out of bounds write on accessing the unitary matrix with qk_circuit_inst_unitary().
IBM · Qiskit SDK
High8.4 - CVE-2026-123615
imgproxy before 4.0.17 Out-of-Bounds Write in ICO Loader
imgproxy · imgproxy
High8.7 - CVE-2026-104267
Botan: scrypt V-buffer heap overflow on 32-bit from constructor-accepted parameters
randombit · botan
Medium4.1 - CVE-2026-123976
EDFbrowser before 2.16 Out-of-Bounds Write via check_edf_file() Annotation Signals
Teunis van Beelen · EDFbrowser
Medium6.8 - CVE-2026-112334
Wazuh 1.0.0 before 4.14.9 Out-of-Bounds Write in wazuh-execd via ar.conf
wazuh · wazuh
Medium6.9 - CVE-2026-89142
Out-of-bounds Write in Wi-Fi NPU
Airoha Technology Corp. · EN7529, AN7552, AN7581, AN7583 (Wi-Fi NPU Firmware)
Medium6.3 - CVE-2026-76181
Heap buffer overflow in dBASE index import
The Document Foundation · LibreOffice
Medium5.4 - CVE-2026-116783
FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
signalwire · freeswitch
High8.2 - CVE-2026-116781
FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing
signalwire · freeswitch
Medium5.3 - CVE-2026-116785
FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
signalwire · freeswitch
Critical9.1