CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,008 vulnerabilities with CWE-119
CVE-2015-7730
SAP BusinessObjects BI Platform <4.1 - DoS
CVE-2015-6507
SAP HANA hdbsql 1.00.091.00 - Memory Corruption
CVE-2015-7829
Adobe Reader/Acrobat <10.1.16/11.0.13 - Path Traversal
CVE-2015-7634
Adobe Flash Player <18.0.0.252 & 19.x <19.0.0.207 - Memory Corruption
CVE-2015-7633
Adobe Flash Player <18.0.0.252 & 19.x <19.0.0.207 - Memory Corruption
CVE-2015-7632
Adobe Flash Player <18.0.0.252-19.0.0.207 - Buffer Overflow
CVE-2015-7630
Adobe Flash Player <18.0.0.252 & 19.x <19.0.0.207 - Memory Corruption
CVE-2015-7627
Adobe Flash Player <18.0.0.252 & 19.x <19.0.0.207 - Memory Corruption
CVE-2015-7626
Adobe Flash Player <18.0.0.252 & 19.x <19.0.0.207 - Memory Corruption
CVE-2015-7625
Adobe Flash Player <18.0.0.252 & 19.x <19.0.0.207 - Memory Corruption
CVE-2015-7622
Adobe Reader/Acrobat <10.1.16/<11.0.13 - Memory Corruption
CVE-2015-6695
Adobe Acrobat < 10.1.15 - Memory Corruption
CVE-2015-6694
Adobe Acrobat and Reader Remote Code Execution via fillColor Attribute
CVE-2015-6693
Adobe Acrobat and Reader Remote Code Execution via signatureSetSeedValue
CVE-2015-6686
Adobe Acrobat and Reader Remote Code Execution via Crafted Field Set
CVE-2015-6685
Adobe Acrobat and Reader Remote Code Execution via Format Action
CVE-2015-6056
Microsoft Internet Explorer <11 - RCE
CVE-2015-6055
Microsoft VBScript/JScript <5.8 - RCE
CVE-2015-6050
Microsoft Internet Explorer 10 - Memory Corruption
CVE-2015-6049
Microsoft Internet Explorer <11 - Code Injection
CVE-2015-2557
Microsoft Visio 2007 SP3 and 2010 SP2 - Remote Code Execution via Crafted UML Data
CVE-2015-2549
Windows Kernel - Local Privilege Escalation via Memory Corruption
CVE-2015-2482
Microsoft JScript and VBScript - Remote Code Execution via Crafted Replace Operation with JavaScript Regular Expression
CVE-2015-7768
Konica Minolta FTP Utility 1.0 - RCE
CVE-2015-7767
Konica Minolta FTP Utility 1.0 - RCE
Details
Vulnerabilities 14,008
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits