CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

13,993 vulnerabilities with CWE-119
CVE-2017-16375 HIGH
Adobe Acrobat and Reader <2017.012.20098 - Memory Corruption
CVSS 8.8
CVE-2017-16373 HIGH
Adobe Acrobat <2017.012.20098 - Untrusted Pointer Dereference
CVSS 8.8
CVE-2017-16372 HIGH
Adobe Acrobat and Reader <2017.012.20098 - RCE
CVSS 8.8
CVE-2017-16371 HIGH
Adobe Acrobat <2017.012.20098 - Memory Corruption
CVSS 8.8
CVE-2017-16368 HIGH
Adobe Acrobat and Reader <2017.012.20098 - Buffer Overflow
CVSS 8.8
CVE-2017-16364 HIGH
Adobe Acrobat and Reader <2017.012.20098 - Memory Corruption
CVSS 8.8
CVE-2017-11303 CRITICAL
Adobe Photoshop <= 18.1.1 (2017.1.1) - Memory Corruption
CVSS 9.8
CVE-2017-11302 CRITICAL
Adobe InDesign <= 12.1.0 - Memory Corruption leading to Arbitrary Code Execution
CVSS 9.8
CVE-2017-11301 MEDIUM
Adobe Digital Editions <= 4.5.6 - Memory Corruption
CVSS 5.3
CVE-2017-11300 MEDIUM
Adobe Digital Editions <= 4.5.6 - Memory Corruption
CVSS 5.3
CVE-2017-11299 MEDIUM
Adobe Digital Editions <= 4.5.6 - Memory Corruption
CVSS 5.3
CVE-2017-11298 MEDIUM
Adobe Digital Editions <= 4.5.6 - Memory Corruption
CVSS 5.3
CVE-2017-11297 MEDIUM
Adobe Digital Editions <= 4.5.6 - Memory Corruption
CVSS 5.3
CVE-2017-11295 CRITICAL
Adobe DNG Converter <= 9.12.1 - Memory Corruption
CVSS 9.8
CVE-2017-11294 CRITICAL
Adobe Shockwave <= 12.2.9.199 - Memory Corruption
CVSS 9.8
CVE-2017-11293 CRITICAL
Adobe Acrobat and Reader Memory Corruption RCE (<=11.0.22, <=15.006.30355, <=17.012.20098)
CVSS 9.8
CVE-2017-12823 HIGH
Kaspersky Embedded Systems Security 1.2.0.300 - Local Privilege Escalation via Kernel Pool Memory Corruption
CVSS 7.8
CVE-2017-11940 HIGH
Microsoft Forefront/Defender < various - RCE
CVSS 7.8
CVE-2017-17475 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
CVE-2017-17474 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
CVE-2017-17473 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
CVE-2017-17472 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
CVE-2017-17471 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
CVE-2017-17470 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
CVE-2017-17469 HIGH
TG Soft Vir.IT eXplorer Lite 8.5.42 - Denial of Service via DeviceIoControl Request
CVSS 7.8
Details
Vulnerabilities 13,993
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits