cve.bz

CWE-122: Heap-based Buffer Overflow, page 15

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2026-71343EPSS 0.3%

    Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.

  2. 6.7CVE-2026-71339EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-71334EPSS 0.3%

    Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally.

  4. 6.8CVE-2026-71329EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack.

  5. 8.8CVE-2026-71328EPSS 0.8%

    Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

  6. 8.8CVE-2026-70586EPSS 0.8%

    Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

  7. 7.8CVE-2026-70583EPSS 0.3%

    Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

  8. 7.0CVE-2026-70578EPSS 0.3%

    Heap-based buffer overflow in Windows Credential Guard allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2026-70573EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-70568EPSS 0.3%

    Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-70564EPSS 0.3%

    Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  12. 8.8CVE-2026-70351EPSS 0.8%

    Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.

  13. 7.8CVE-2026-70289EPSS 0.3%

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

  14. 8.8CVE-2026-70203EPSS 0.8%

    Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

  15. 7.8CVE-2026-69921EPSS 0.3%

    Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  16. 8.2CVE-2026-69906EPSS 0.3%

    Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

  17. 6.4CVE-2026-69878EPSS 0.3%

    Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally.

  18. 8.0CVE-2026-69875EPSS 0.8%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network.

  19. 8.8CVE-2026-69860EPSS 0.8%

    Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

  20. 7.5CVE-2026-69852EPSS 0.7%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  21. 8.0CVE-2026-69847EPSS 0.6%

    Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over an adjacent network.

  22. 9.8CVE-2026-69845EPSS 1.0%

    Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.

  23. 7.8CVE-2026-69841EPSS 0.3%

    Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

  24. 9.8CVE-2026-69829EPSS 1.0%

    Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

  25. 8.0CVE-2026-69826EPSS 0.8%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

  26. 9.8CVE-2026-69824EPSS 1.0%

    Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network.

  27. 7.8CVE-2026-69822EPSS 0.3%

    Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally.

  28. 6.7CVE-2026-69820EPSS 0.3%

    Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

  29. 7.8CVE-2026-69801EPSS 0.3%

    Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-69790EPSS 0.3%

    Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-69787EPSS 0.3%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  32. 8.1CVE-2026-69786EPSS 0.7%

    Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

  33. 8.8CVE-2026-69778EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.

  34. 8.0CVE-2026-69777EPSS 0.6%

    Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network.

  35. 8.0CVE-2026-69773EPSS 0.8%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

  36. 8.8CVE-2026-69772EPSS 0.8%

    Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.

  37. 9.8CVE-2026-69769EPSS 1.0%

    Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized attacker to execute code over a network.

  38. 9.8CVE-2026-69768EPSS 1.0%

    Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network.

  39. 8.8CVE-2026-69764EPSS 0.8%

    Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

  40. 7.8CVE-2026-69758EPSS 0.3%

    Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-69738EPSS 0.3%

    Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

  42. 8.1CVE-2026-69732EPSS 0.7%

    Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network.

  43. 7.8CVE-2026-69731EPSS 0.3%

    Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

  44. 8.8CVE-2026-69729EPSS 0.9%

    Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network.

  45. 8.0CVE-2026-69727EPSS 0.8%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network.

  46. 7.8CVE-2026-69720EPSS 0.3%

    Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  47. 9.8CVE-2026-69715EPSS 1.0%

    Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network.

  48. 7.8CVE-2026-69709EPSS 0.3%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

  49. 7.8CVE-2026-69691EPSS 0.3%

    Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

  50. 7.5CVE-2026-69688EPSS 0.6%

    Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.