CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
3,271 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 31 of 66
- CVE-2026-66799HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
- CVE-2026-65814HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-65787HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65786HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-65672HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
- CVE-2026-65671HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
- CVE-2026-65664HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-65661HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-63519HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-63518HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- CVE-2026-63513HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
- CVE-2026-62894HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-62890HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
- CVE-2026-62797HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
- CVE-2026-62772HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
- CVE-2026-62758HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62783HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
- CVE-2026-62754HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
- CVE-2026-62747HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-62739HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62735HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-62722HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
- CVE-2026-62719HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
- CVE-2026-62712HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
- CVE-2026-62713HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-62688HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
- CVE-2026-62695HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
- CVE-2026-61932HIGHCVSS 7.8EG 7.82026-08-11
Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
- CVE-2026-62692HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
- CVE-2026-61937HIGHCVSS 7.8EG 7.82026-08-11
Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- CVE-2026-61930HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
- CVE-2026-61923HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-61353HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-54984HIGHCVSS 7.8EG 7.82026-08-11
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
- CVE-2026-70638HIGHCVSS 7.8EG 7.82026-08-06
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow …
- CVE-2026-14266HIGHCVSS 7.8EG 7.82026-07-29
7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vu…
- CVE-2026-16463HIGHCVSS 7.8EG 7.82026-07-29
A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the …
- CVE-2026-48372HIGHCVSS 7.8EG 7.82026-07-28
Format Plugins is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…
- CVE-2026-35591HIGHCVSS 7.8EG 7.82026-07-20
libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF …
- CVE-2026-48373HIGHCVSS 7.8EG 7.82026-07-17
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma…
- CVE-2026-40106HIGHCVSS 7.8EG 7.82026-07-16
Wazuh is a free and open source platform used for threat prevention, detection, and response. Versions 4.6.0 and above prior to 4.14.5 contain a heap-based buffer overflow vulnerability in the syscheck component of the Wazuh agent for Wind…
- CVE-2026-48339HIGHCVSS 7.8EG 7.82026-07-14
Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious …
- CVE-2026-24272HIGHCVSS 7.8EG 7.82026-07-14
NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution.
- CVE-2026-24268HIGHCVSS 7.8EG 7.82026-07-14
NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.
- CVE-2026-48269HIGHCVSS 7.8EG 7.82026-07-14
Premiere Pro is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mali…
- CVE-2026-58542HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.
- CVE-2026-58547HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.
- CVE-2026-58538HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-58530HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
- CVE-2026-57096HIGHCVSS 7.8EG 7.82026-07-14
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →