← Back
CWE-122

3,138 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

JSON object

Loading...

CVEs (3,138)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Adobe
1Animate
Jun 17, 2026
Oct 9, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires...Show more
Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Show less
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability
1Microsoft
10Windows 10 1809
Windows 10 21h2Windows 10 22h2+7 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
1Microsoft
1Windows 11 24h2
Jun 17, 2026
Oct 8, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Kernel Elevation of Privilege Vulnerability
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
1Microsoft
9Windows 10 1809
Windows 10 21h2Windows 10 22h2+6 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
6.8 MEDIUM· v3
N/A· v2
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
1Microsoft
2Windows 11 22h2
Windows 11 23h2
Jun 17, 2026
Oct 8, 2024
N/A· v4
7.0 HIGH· v3
N/A· v2
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Telephony Server Remote Code Execution Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
1Microsoft
1Azure Service Fabric
Jun 17, 2026
Oct 8, 2024
N/A· v4
6.6 MEDIUM· v3
N/A· v2
Azure Service Fabric for Linux Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2008
Windows Server 2012Windows Server 2016+3 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability