CWE-122: Heap-based Buffer Overflow — known CVE vulnerabilities

CVEs classified under CWE-122 (Heap-based Buffer Overflow), ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (50)

• CVE-2026-10747 — CVSS 10.0 (critical): IBM MQ Appliance could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer…
• CVE-2026-46752: Redis Lua HEAP overflow in cjson library vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: from 2.0.4 through 2.15.0…
• CVE-2026-24822: Out-of-bounds Write, Heap-based Buffer Overflow vulnerability in ttttupup wxhelper (src modules). This vulnerability is associated with…
• CVE-2025-23123 — CVSS 10.0 (critical): A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow…
• CVE-2022-34819 — CVSS 10.0 (critical): A vulnerability has been identified in SIMATIC CP 1242-7 V2 (All versions < V3.3.46), SIMATIC CP 1243-1 (All versions < V3.3.46), SIMATIC…
• CVE-2026-10858 — CVSS 9.9 (critical): IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute…
• CVE-2026-44050 — CVSS 9.9 (critical): A heap-based buffer overflow in the CNID daemon comm_rcv() function in Netatalk 2.0.0 through 4.4.2 allows a remote authenticated attacker…
• CVE-2026-102175 — CVSS 9.8 (critical): A Heap-based Buffer Overflow vulnerability in the sdxd service-deployment daemon of Juniper Networks Junos OS and Junos OS Evolved allows a…
• CVE-2026-101950 — CVSS 9.8 (critical): A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated…
• CVE-2026-97815 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
• CVE-2026-97814 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
• CVE-2026-97016 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-96909 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
• CVE-2026-96320 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
• CVE-2026-96113 — CVSS 9.8 (critical): Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
• CVE-2026-96096 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
• CVE-2026-85928 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
• CVE-2026-85814 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
• CVE-2026-85809 — CVSS 9.8 (critical): Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
• CVE-2026-84015 — CVSS 9.8 (critical): Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a…
• CVE-2026-83935 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
• CVE-2026-83782 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
• CVE-2026-83770 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
• CVE-2026-83748 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
• CVE-2026-83693 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
• CVE-2026-83578 — CVSS 9.8 (critical): Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
• CVE-2026-83519 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
• CVE-2026-83517 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
• CVE-2026-70291 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-70242 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• CVE-2026-70157 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
• CVE-2026-70153 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
• CVE-2026-70147 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.
• CVE-2026-70096 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
• CVE-2026-69886 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
• CVE-2026-69639 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.
• CVE-2026-69634 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
• CVE-2026-105016 — CVSS 9.8 (critical): Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
• CVE-2026-102210 — CVSS 9.8 (critical): Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
• CVE-2026-100222 — CVSS 9.8 (critical): Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
• CVE-2026-14269 — CVSS 9.8 (critical): IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is…
• CVE-2026-76471 — CVSS 9.8 (critical): A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code…
• CVE-2026-94127 — CVSS 9.8 (critical) — actively exploited: When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code…
• CVE-2016-15059 — CVSS 9.8 (critical): Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in…
• CVE-2026-58264 — CVSS 9.8 (critical): FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler…
• CVE-2026-54627 — CVSS 9.8 (critical): SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and…
• CVE-2026-54626 — CVSS 9.8 (critical): SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and…
• CVE-2026-91106 — CVSS 9.8 (critical): HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components…
• CVE-2026-91105 — CVSS 9.8 (critical): HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components…
• CVE-2026-91104 — CVSS 9.8 (critical): HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components…