CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,327 vulnerabilities with CWE-122
CVE-2024-38077 CRITICAL
Windows Remote Desktop Licensing Service - Remote Code Execution
CVSS 9.8
CVE-2024-38076 CRITICAL
Windows Remote Desktop Licensing Service - Remote Code Execution
CVSS 9.8
CVE-2024-38065 MEDIUM
Windows 10 1507-22H2 and Windows 11 21H2-23H2 - Secure Boot Security Feature Bypass
CVSS 6.8
CVE-2024-38060 HIGH
Windows Imaging Component - Remote Code Execution
CVSS 8.8
CVE-2024-38054 HIGH
Kernel Streaming WOW Thunk Service Driver - Privilege Escalation
CVSS 7.8
CVE-2024-38051 HIGH
Windows Graphics Component - Remote Code Execution
CVSS 7.8
CVE-2024-38032 HIGH
Windows 10/11 Multiple Versions - Remote Code Execution via Xbox Component
CVSS 7.1
CVE-2024-38025 HIGH
Microsoft Windows Performance Data Helper Library - RCE
CVSS 7.2
CVE-2024-37987 HIGH
Windows 10 1507-22H2 and Windows 11 21H2-23H2 - Secure Boot Security Feature Bypass via Type Confusion
CVSS 8.0
CVE-2024-37977 HIGH
Windows 11/Server 2022 Secure Boot Security Feature Bypass
CVSS 8.0
CVE-2024-37334 HIGH
Microsoft OLE DB Driver for SQL Server 18.0.2-18.7.0004.0 - Remote Code Execution
CVSS 8.8
CVE-2024-37333 HIGH
SQL Server 2016/2017/2019/2022 RCE via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-37332 HIGH
SQL Server 2016/2017/2019/2022 RCE via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-37331 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-37330 HIGH
SQL Server 2016/2017/2019/2022 - Remote Code Execution via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-37329 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-37328 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-37327 HIGH
SQL Server 2016/2017/2019/2022 RCE via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-37326 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-37324 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-37322 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
CVE-2024-37321 HIGH
SQL Server 2016/2017/2019/2022 RCE via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-37319 HIGH
SQL Server 2016/2017/2019/2022 RCE via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-37318 HIGH
SQL Server 2016/2017/2019/2022 RCE via Native Client OLE DB Provider
CVSS 8.8
CVE-2024-35272 HIGH
SQL Server 2016/2017/2019/2022 Remote Code Execution via Heap-based Buffer Overflow
CVSS 8.8
Details
Vulnerabilities 2,327
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits