CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,135 vulnerabilities with CWE-122
CVE-2025-49742 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Integer Overflow
CVSS 7.8
CVE-2025-49732 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-49730 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-49729 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49727 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Heap Buffer Overflow
CVSS 7.0
CVE-2025-49721 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Heap Buffer Overflow
CVSS 7.8
CVE-2025-49717 HIGH
Microsoft Sql Server 2019 < 15.0.2135.5 - Heap Buffer Overflow
CVSS 8.5
CVE-2025-49705 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 7.8
CVE-2025-49697 HIGH
Microsoft 365 Apps < 16.0.10417.20027 - Heap Buffer Overflow
CVSS 8.4
CVE-2025-49696 HIGH
Microsoft 365 Apps - Heap Buffer Overflow
CVSS 8.4
CVE-2025-49691 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Heap Buffer Overflow
CVSS 8.0
CVE-2025-49683 HIGH
Microsoft Windows 10 1507 < 10.0.10240.21073 - Integer Overflow
CVSS 7.8
CVE-2025-49676 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49674 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49673 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49672 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49670 MEDIUM
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 6.5
CVE-2025-49669 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49668 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49666 HIGH
Microsoft Windows Server 2016 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 7.2
CVE-2025-49663 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-49657 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Heap Buffer Overflow
CVSS 8.8
CVE-2025-48824 HIGH
Windows RRAS - Buffer Overflow
CVSS 8.8
CVE-2025-48805 HIGH
Microsoft MPEG-2 Video Extension - Buffer Overflow
CVSS 7.8
CVE-2025-47998 HIGH
Microsoft Windows Server 2008 < 10.0.14393.8246 - Integer Overflow
CVSS 8.8
Details
Vulnerabilities 2,135
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits