CWE-787

High likelihood

Out-of-bounds Write

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product writes data past the end, or before the beginning, of the intended buffer.

14,104 vulnerabilities with CWE-787
CVE-2026-44634 HIGH
Stack buffer overflows in SimpleBLE
CVE-2026-47911 HIGH
Acrobat Reader | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-48306 HIGH
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-48305 HIGH
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-34710 HIGH
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-34709 HIGH
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-48293 HIGH
InDesign Desktop | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-34706 HIGH
InCopy | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-34700 HIGH
InDesign Desktop | Out-of-bounds Write (CWE-787)
CVSS 7.8
CVE-2026-7383 HIGH
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
CVSS 8.1
CVE-2026-49840 CRITICAL
FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing
CVSS 9.1
CVE-2026-49475 HIGH
FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing
CVSS 7.5
CVE-2026-48563 HIGH
Microsoft Windows 10 Version 1809 - Remote Desktop Client Remote Code Execution Vulnerability
CVSS 7.5
CVE-2026-47654 HIGH
Microsoft Windows Server 2016 - Remote Desktop Client Remote Code Execution Vulnerability
CVSS 7.5
CVE-2026-47653 HIGH
Microsoft Windows 10 Version 1607 - Remote Desktop Client Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-44801 HIGH
Remote Desktop Client Remote Code Execution Vulnerability
CVSS 7.5
CVE-2026-42985 HIGH
Remote Desktop Client Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-42910 HIGH
Microsoft Windows 11 Version 24H2 - Windows Hotpatch Monitoring Service Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-42909 HIGH
Remote Desktop Client Remote Code Execution Vulnerability
CVSS 7.5
CVE-2026-3088 MEDIUM
Unauthenticated users can disrupt router operation
CVE-2026-9698 CRITICAL
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer
CVSS 9.8
CVE-2026-5068 HIGH
bt: l2cap le coc: remote oob write via seg counter stored in net_buf user_data
CVSS 7.6
CVE-2026-5067 CRITICAL
Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key
CVSS 9.8
CVE-2026-11690 HIGH
Google Chrome - Out-of-Bounds Access
CVSS 7.5
CVE-2026-11672 HIGH
Google Chrome - Out-of-bounds Write
CVSS 8.3
Details
Vulnerabilities 14,104
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits