CWE-122
3,678 CVEs • Abstraction: Variant • Likelihood of Exploit: High
Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
CVEs (3,678)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 19, 2026 Oct 15, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 19, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 19, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. |
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 20, 2026 Oct 15, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
bincookie is a header-only binarycookies parser. Prior to 0.1.9, bincookie_init_file() in bincookie.h allocates a buffer using the actual .binarycookies file length but trusts the file-controlled num_pages field as the l...Show more |
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack...Show more |
A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution. |
A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow. |
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow. |
A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow. |
A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow. |
A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow. |