Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-124

46 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 46 in the listAtom feed of new CVEsWhat CWE-124 is, at MITRE (opens in a new tab)
Published CVEs
46
Last 12 months
23
Critical
3
Known exploited
1

Critical 3High 18Medium 24Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20151
  2. 20181
  3. 20191
  4. 20212
  5. 20223
  6. 20233
  7. 20243
  8. 202511
  9. 202621

Known exploitedNewest addition to KEV first

  • CVE-2015-2426

    Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,…

    Product not named

    ExploitedHigh8.8

Newest CVEs

  • CVE-2026-12538

    IBM MQ Appliance is affected by an improper validation vulnerability

    IBM · MQ Appliance

    Medium5.4
  • CVE-2026-97008

    Microsoft Office Excel Remote Code Execution Vulnerability

    Microsoft · Microsoft 365 Apps for Enterprise

    High8.8
  • CVE-2026-109964

    ImageMagick before 7.1.2-33 and 6.9.13-58 Heap Buffer Underwrite in PICT Decoder

    ImageMagick · ImageMagick

    Medium6.3
  • CVE-2026-109448

    psqlODBC SQLBindParameter heap memory corruption when binding more than 32767 parameters

    PostgreSQL · psqlODBC

    Medium5.9
  • CVE-2026-16179

    IBM DataPower Gateway Buffer Underwrite

    IBM · DataPower Gateway 10.6CD

    High7.5
  • CVE-2026-40013

    An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the…

    Open-Xchange GmbH · OX Dovecot Pro

    Medium4.3
  • CVE-2026-73075

    Vim: Out-of-bounds Access in Popup Opacity Handling

    vim · vim

    Medium4.6
  • CVE-2026-71969

    OP-TEE OS 4.10.0 Buffer Underwrite via RSA NOPAD Encrypt/Decrypt Operations

    OP-TEE · optee_os

    High8.4
  • CVE-2026-16439

    Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow

    Eclipse Foundation · OpenJ9

    Medium5.8
  • CVE-2026-26199

    Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero

    HDFGroup · hdf5

    Medium5.9

Vendors it comes up for most

  1. Red Hat3
  2. wazuh3
  3. AMD2
  4. Adobe2
  5. Cisco2
  6. IBM2
  7. ImageMagick2
  8. MediaTek, Inc.2
  9. TianoCore2
  10. Zoom Communications, Inc2