CWE-119

High likelihood

Improper Restriction of Operations within the Bounds of a Memory Buffer

Parent: CWE-118 - Incorrect Access of Indexable Resource ('Range Error')

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

14,009 vulnerabilities with CWE-119
CVE-2015-5087
Adobe Acrobat and Reader Remote Code Execution or DoS via Memory Corruption
CVE-2015-3095
Adobe Reader/Acrobat <10.1.15/11.0.12 - Memory Corruption
CVE-2015-5121
Adobe Shockwave Player < 12.1.8.158 - Remote Code Execution via Memory Corruption
CVE-2015-5120
Adobe Shockwave Player < 12.1.8.158 - Remote Code Execution
CVE-2015-2422
Microsoft Internet Explorer 6-11 - Remote Code Execution via Memory Corruption
CVE-2015-2415
Microsoft Excel 2007/2010/2013 & Office Compatibility Pack - RCE or DoS via Crafted Document
CVE-2015-2411
Microsoft Internet Explorer 10 and 11 - Remote Code Execution via Memory Corruption
CVE-2015-2408
Microsoft Internet Explorer 9-11 - Remote Code Execution via Memory Corruption
CVE-2015-2406
Microsoft Internet Explorer 6-11 - Remote Code Execution via Memory Corruption
CVE-2015-2404
Microsoft Internet Explorer 6-11 - Remote Code Execution via Memory Corruption
CVE-2015-2403
Microsoft Internet Explorer 8 - Remote Code Execution via Memory Corruption
CVE-2015-2401
Microsoft Internet Explorer 9-11 - Remote Code Execution via Memory Corruption
CVE-2015-2397
Microsoft Internet Explorer 6-11 - Remote Code Execution via Memory Corruption
CVE-2015-2391
Microsoft Internet Explorer 9 - Remote Code Execution via Memory Corruption
CVE-2015-2390
Microsoft Internet Explorer 6-11 - Remote Code Execution via Memory Corruption
CVE-2015-2389
Microsoft Internet Explorer 10 and 11 - Remote Code Execution via Memory Corruption
CVE-2015-2388
Microsoft Internet Explorer 8 and 9 - Remote Code Execution via Memory Corruption
CVE-2015-2385
Microsoft Internet Explorer 6-11 - Remote Code Execution via Memory Corruption
CVE-2015-2384
Microsoft Internet Explorer 11 - Remote Code Execution via Memory Corruption
CVE-2015-2383
Microsoft Internet Explorer 11 - Remote Code Execution via Memory Corruption
CVE-2015-2380
Microsoft Word 2007/2010/2013 - Remote Code Execution or Denial of Service via Crafted Document
CVE-2015-2379
Microsoft Office and Word - Remote Code Execution via Crafted Office Document
CVE-2015-2377
Microsoft Excel 2007/2010/2013 & Office Compatibility Pack - Remote Code Execution via Crafted Document
CVE-2015-2376
Microsoft Excel - Memory Corruption
CVE-2015-2372
Microsoft VBScript 5.6-5.8 - Remote Code Execution via Memory Corruption
Details
Vulnerabilities 14,009
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits