CWE-119: Memory buffer bounds error
14,686 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 59 of them as exploited in the wild.
- Published CVEs
- 14,686
- Last 12 months
- 1,587
- Critical
- 1,506
- Known exploited
- 59
Critical 1,506High 9,463Medium 3,547Low 170Not scored 0
CVEs per yearBy the year they were published
- 2019477
- 2020750
- 20211,087
- 2022825
- 2024247
- 2024286
- 2024363
- 2025220
- 2025197
- 20261,401
- 20261,168
- 20261,259
Known exploitedNewest addition to KEV first
- CVE-2026-88779
Memory overflow vulnerability leading to Denial of Service
NetScaler · ADC
ExploitedHigh8.7 - CVE-2026-88772
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
Citrix NetScaler · ADC
ExploitedCritical9.5 - CVE-2026-8452
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
NetScaler · ADC
ExploitedHigh8.8 - CVE-2009-3459
Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code…
Product not named
ExploitedHigh8.8 - CVE-2008-4250
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote…
Product not named
ExploitedCritical9.8 - CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2026-3910
Inappropriate implementation in V8 in Google Chrome prior to 146.0.7680.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted…
Google · Chrome
ExploitedHigh8.8 - CVE-2008-0015
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control…
Product not named
ExploitedHigh8.8 - CVE-2026-20700
A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2025-14174
Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a…
Google · Chrome
ExploitedHigh8.8
Newest CVEs
- CVE-2026-121517
IrfanView TIFF Wang Annotation heap-based overflow
IrfanView
Low2.3 - CVE-2026-121074
Memory corruption in GPU in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…
Google · Chrome
Critical9.6 - CVE-2026-121229
Memory corruption in ANGLE in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the…
Google · Chrome
Critical9.6 - CVE-2026-95730
Authenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIA
Hewlett Packard Enterprise (HPE) · Virtual Intranet Access (VIA)
Medium6.5 - CVE-2026-120572
Incorrect boundary conditions in the Layout: Block and Inline component
Mozilla · Firefox
High8.8 - CVE-2026-58977
In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of…
Google · Android
Medium6.7 - CVE-2026-59010
In deserialize of legacy.rs, there is a possible denial of service due to a missing bounds check. This could lead to local denial of service with no additional…
Google · Android
Medium6.2 - CVE-2026-58988
In isValid of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no…
Google · Android
Medium4.0 - CVE-2026-58975
In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no…
Google · Android
High8.4 - CVE-2026-58853
In multiple functions of ipphelper.c, there is a possible stack bugger overflow due to a missing bounds check. This could lead to remote denial of service with…
Google · Android
High7.5