CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,755 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 12 of 76
- CVE-2026-97751HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- CVE-2026-97003HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- CVE-2026-97766HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- CVE-2026-97753HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- CVE-2026-96943HIGHCVSS 8.8EG 8.82026-10-13
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
- CVE-2026-88202HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-88196HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- CVE-2026-88197HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
- CVE-2026-88155HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
- CVE-2026-88145HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
- CVE-2026-70301HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-70302HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-70287HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-70282HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70257HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70256HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
- CVE-2026-70268HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
- CVE-2026-70149HIGHCVSS 8.8EG 8.82026-10-13
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
- CVE-2026-70068HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-85936HIGHCVSS 8.8EG 8.82026-10-13
Double free in Windows Shell allows an unauthorized attacker to execute code over a network.
- CVE-2026-85931HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.
- CVE-2026-70210HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-88157HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- CVE-2026-85339HIGHCVSS 8.8EG 8.82026-10-13
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
- CVE-2026-70089HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Windows GDI allows an unauthorized attacker to execute code over a network.
- CVE-2026-83851HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-83688HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
- CVE-2026-105717HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-108467HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network.
- CVE-2026-105716HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105598HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105597HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105596HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105593HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-105591HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-102858HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network.
- CVE-2026-102857HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102856HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102855HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
- CVE-2026-102850HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-102849HIGHCVSS 8.8EG 8.82026-10-13
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
- CVE-2026-58835HIGHCVSS 8.8EG 8.82026-10-05
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2026-103631HIGHCVSS 8.8EG 8.82026-10-02
Buffer overflow in WebRTC in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVE-2026-95387HIGHCVSS 8.8EG 8.82026-09-29
SPDY protocol dissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service
- CVE-2026-94424HIGHCVSS 8.8EG 8.82026-09-21
A vulnerability has been found in Moore Threads MTT S80 Driver Package up to 340.150. Impacted is the function sub_140001000 in the library mtdispkm64.sys of the component IOCTL Handler. The manipulation leads to heap-based buffer overflow…
- CVE-2026-11381HIGHCVSS 8.8EG 8.82026-09-18
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of message distribution list structures.
- CVE-2026-11375HIGHCVSS 8.8EG 8.82026-09-18
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a stack buffer overflow when processing XA transaction identifiers.
- CVE-2026-10575HIGHCVSS 8.8EG 8.82026-09-18
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially escalate privileges due to a heap buffer overflow when processing MQPUT operations with malformed distribution headers.
- CVE-2026-93381HIGHCVSS 8.8EG 8.82026-09-17
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security sev…
- CVE-2026-69486HIGHCVSS 8.8EG 8.82026-09-15
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →