CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,559 vulnerabilities with CWE-122
CVE-2026-55029 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-55017 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-55010 CRITICAL
Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability
CVSS 9.8
CVE-2026-54124 HIGH
Microsoft Windows 10 Version 21H2 - Windows Terminal Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-54115 HIGH
Microsoft Windows 10 Version 1607 - Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50692 HIGH
Microsoft Windows 10 Version 1607 - Desktop Window Manager Elevation of Privilege Vulnerability
CVSS 8.8
CVE-2026-50683 HIGH
Microsoft Windows 10 Version 1607 - Windows DHCP Client Elevation of Privilege Vulnerability
CVSS 8.0
CVE-2026-50680 HIGH
Microsoft Windows 10 Version 1809 - Windows Hyper-V Elevation of Privilege Vulnerability
CVSS 8.2
CVE-2026-50679 HIGH
Microsoft Windows 11 Version 24H2 - Windows Search Service Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50670 HIGH
Microsoft Windows 10 Version 1809 - Windows Win32k Elevation of Privilege Vulnerability
CVSS 8.8
CVE-2026-50668 MEDIUM
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS 6.8
CVE-2026-50655 HIGH
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50518 CRITICAL
Microsoft Windows 10 Version 1607 - Windows DHCP Server Remote Code Execution Vulnerability
CVSS 9.8
CVE-2026-50499 HIGH
Microsoft Windows 10 Version 1809 - Windows Print Spooler Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50494 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50492 MEDIUM
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 6.8
CVE-2026-50489 HIGH
Microsoft Windows 10 Version 1607 - Win32k Elevation of Privilege Vulnerability
CVSS 8.8
CVE-2026-50484 HIGH
Microsoft Windows 10 Version 1809 - Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50482 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.3
CVE-2026-50480 HIGH
Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50477 HIGH
Microsoft Windows 10 Version 1607 - Windows Kernel Elevation of Privilege Vulnerability
CVSS 8.8
CVE-2026-50471 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50461 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50448 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50447 CRITICAL
Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability
CVSS 9.8
Details
Vulnerabilities 2,559
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits