CWE-122: Heap-based buffer overflow

CVEs per yearBy the year they were published

1. 20152
2. 20162
3. 20177
4. 201845
5. 201968
6. 202054
7. 2021131
8. 2022188
9. 2023256
10. 2024528
11. 2025543
12. 20261,894

Known exploitedNewest addition to KEV first

• CVE-2026-94127

  BIG-IP APM OAuth vulnerability

  F5 · BIG-IP

  ExploitedCritical9.3
• CVE-2025-25249

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…

  Fortinet · FortiSwitchManager

  ExploitedHigh7.4
• CVE-2026-85880

  Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1607

  ExploitedHigh7.8
• CVE-2026-53362

  ipv6: account for fraggap on the paged allocation path

  Linux · Linux

  ExploitedHigh7.8
• CVE-2009-3459

  Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code…

  Product not named

  ExploitedHigh8.8
• CVE-2025-24993

  Windows NTFS Remote Code Execution Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8
• CVE-2025-24985

  Windows Fast FAT File System Driver Remote Code Execution Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8
• CVE-2025-21418

  Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8
• CVE-2025-21333

  Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 21H2

  ExploitedHigh7.8
• CVE-2024-49138

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft · Windows 10 Version 1507

  ExploitedHigh7.8

Newest CVEs

• CVE-2026-62365

  Wazuh: Heap Buffer Overflow in DecodeWinevt() join_data Accumulation via Crafted EventChannel XML

  wazuh · wazuh

  Medium5.3
• CVE-2026-122126

  reSIProcate reTurn client through 1.14.0 Heap Buffer Overflow via TurnTcpSocket

  resiprocate · resiprocate

  High8.2
• CVE-2026-12550

  IBM MQ is affected by a denial of service vulnerability

  IBM · MQ

  Medium5.4
• CVE-2026-121964

  FreeRDP before 3.32.2 Heap Buffer Overflow via rpc_client_recv_fragment

  FreeRDP · FreeRDP

  High8.7
• CVE-2026-121958

  FreeRDP through 3.32.1 Heap Out-of-Bounds Write via RDPGFX HashTable_GetKeys

  FreeRDP · FreeRDP

  High8.7
• CVE-2026-121950

  FreeRDP before 3.32.2 Heap Overflow via RDPGFX CREATE_SURFACE Integer Wrap

  FreeRDP · FreeRDP

  High7.1
• CVE-2026-121941

  libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex

  munt · libmt32emu

  High8.5
• CVE-2026-59267

  Apache OpenOffice: Heap Buffer Overflow in DXF LWPOLYLINE import could cause memory corruption

  Apache Software Foundation · Apache OpenOffice

  Medium5.8
• CVE-2026-114549

  NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability

  NoMachine · NoMachine

  Critical9.8
• CVE-2026-120775

  Tanium addressed a heap-based buffer overflow vulnerability in Deploy.

  Tanium · Deploy

  High7.2

Vendors it comes up for most

1. Microsoft1,431
2. Adobe215
3. Google174
4. vim64
5. Siemens63
6. Red Hat62
7. FreeRDP37
8. ImageMagick31
9. Wireshark Foundation30
10. Samsung Mobile29