CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,758 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 32 of 76
- CVE-2026-69949HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-88143HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- CVE-2026-87707HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-87706HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- CVE-2026-85867HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-70238HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
- CVE-2026-70052HIGHCVSS 7.8EG 7.82026-10-13
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
- CVE-2026-70048HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-88168HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85927HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- CVE-2026-85915HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85871HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-85869HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-85848HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85832HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85822HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-85820HIGHCVSS 7.8EG 7.82026-10-13
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-85800HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-85373HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
- CVE-2026-85368HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-85366HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85358HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-85341HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-85327HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
- CVE-2026-85318HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
- CVE-2026-83932HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2026-83920HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-83919HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
- CVE-2026-83569HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-70286HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
- CVE-2026-83896HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83902HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
- CVE-2026-83867HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
- CVE-2026-83882HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83847HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
- CVE-2026-83836HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
- CVE-2026-83833HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83828HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-83779HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
- CVE-2026-83768HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-83758HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
- CVE-2026-83753HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
- CVE-2026-83692HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-83691HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
- CVE-2026-83678HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
- CVE-2026-83652HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-83650HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-83641HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.
- CVE-2026-83518HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally.
- CVE-2026-69633HIGHCVSS 7.8EG 7.82026-10-13
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →