CWE-120: Classic buffer overflow
4,554 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 24 of them as exploited in the wild.
- Published CVEs
- 4,554
- Last 12 months
- 934
- Critical
- 883
- Known exploited
- 24
Critical 883High 2,426Medium 1,157Low 88Not scored 0
CVEs per yearBy the year they were published
- 202426
- 2025640
- 20256
- 202520
- 202516
- 2026618
- 2026799
- 2026535
- 2026519
- 2026447
- 2026414
- 202623
Known exploitedNewest addition to KEV first
- CVE-2025-43520
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS…
Apple · iOS and iPadOS
ExploitedMedium5.5 - CVE-2025-31277
The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS 18.6, macOS Sequoia 15.6, tvOS 18.6, visionOS…
Apple · Safari
ExploitedHigh8.8 - CVE-2022-37055
D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via cgibin, hnap_main,
Product not named
ExploitedCritical9.8 - CVE-2025-20333
A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD)…
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
ExploitedCritical9.9 - CVE-2020-15069
Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S Bookmarks feature for clientless access. Hotfix…
Product not named
ExploitedCritical9.8 - CVE-2023-41064
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura…
Apple · macOS
ExploitedHigh7.8 - CVE-2023-33010
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware…
Zyxel · ATP series firmware
ExploitedCritical9.8 - CVE-2023-33009
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions…
Zyxel · ATP series firmware
ExploitedCritical9.8 - CVE-2021-30983
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadOS 15.2. An application may be able to execute…
Apple · iOS and iPadOS
ExploitedHigh7.8 - CVE-2017-6862
NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code…
NETGEAR All versions prior to WNR2000v3 1.1.2.14, WNR2000v4 1.0.0.66, WNR2000v5 1.0.0.42
ExploitedCritical9.8
Newest CVEs
- CVE-2026-121603
Solanum before commit 2ea1382 Buffer Overflow via Server-to-Server KILL Handler
solanum-ircd · solanum
High8.5 - CVE-2026-109161
Buffer Overflow in Digital I/O
Welotec · TK100
Medium6.9 - CVE-2026-76955
A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)C0 could allow a LAN-based attacker to escalate…
Zyxel · NWA110AX firmware
High8.8 - CVE-2026-120057
psqlODBC large-object read overflows the application buffer
PostgreSQL · psqlODBC
High7.5 - CVE-2026-106804
A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_register() function copies the attacker-controlled…
Product not named
High7.5 - CVE-2026-120241
Ruijie RG-ES205GC Local Firmware Upgrade httpupg.cgi buffer overflow
Ruijie · RG-ES205GC
High8.7 - CVE-2026-120226
Hangzhou Xiongmai Technology P2PAPI.dll P2P SDK P2PAPI_Connect buffer overflow
Hangzhou Xiongmai Technology · P2PAPI.dll
Medium4.8 - CVE-2026-119146
ProFTPD before 1.3.9e and 1.3.10rc5 Buffer Overflow via mod_rewrite utf8trans RewriteMap
ProFTPD Project · ProFTPD
Medium6.3 - CVE-2026-57191
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
asterisk · asterisk
High8.2 - CVE-2026-93857
Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution
WatchGuard · Fireware OS
Critical9.2