CWE-122

High likelihood

Heap-based Buffer Overflow

Parent: CWE-788 - Access of Memory Location After End of Buffer

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

2,559 vulnerabilities with CWE-122
CVE-2026-50417 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50407 HIGH
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50386 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50380 CRITICAL
Microsoft Windows 10 Version 1607 < 10.0.14393.9339 - Buffer Overflow
CVSS 9.6
CVE-2026-50375 MEDIUM
Microsoft Windows 10 Version 1809 - DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVSS 6.3
CVE-2026-50372 HIGH
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
CVSS 7.0
CVE-2026-50370 HIGH
Microsoft Windows 10 Version 1607 - DHCP Server Service Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-50363 HIGH
Microsoft Windows 10 Version 1607 - Windows Push Notifications Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50362 HIGH
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50347 HIGH
Microsoft Windows 10 Version 1607 - Windows Data.dll Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50336 HIGH
Microsoft Windows 11 Version 24H2 - Windows Media Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50332 HIGH
Microsoft Windows 10 Version 1607 - Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50330 HIGH
Microsoft Windows 10 Version 1607 - Windows Remote Desktop Client Elevation of Privilege Vulnerability
CVSS 7.5
CVE-2026-50327 HIGH
Microsoft Windows 11 Version 24H2 - Windows Media Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50313 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50309 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50301 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-58640 HIGH
Microsoft Windows 10 Version 1607 - Windows NTFS Remote Code Execution Vulnerability
CVSS 7.3
CVE-2026-58618 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-58610 HIGH
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-58601 HIGH
Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
CVSS 7.8
CVE-2026-55012 HIGH
Microsoft Defender Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-55005 HIGH
Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-54993 HIGH
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-54992 HIGH
Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability
CVSS 8.4
Details
Vulnerabilities 2,559
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits