cve.bz

CWE-122: Heap-based Buffer Overflow, page 5

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-85905EPSS 0.4%

    Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

  2. 7.8CVE-2026-85902EPSS 0.4%

    Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-85901EPSS 0.4%

    Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2026-85871EPSS 0.3%

    Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

  5. 7.0CVE-2026-85870EPSS 0.3%

    Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

  6. 7.8CVE-2026-85869EPSS 0.3%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  7. 7.8CVE-2026-85867EPSS 0.2%

    Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

  8. 7.1CVE-2026-85856EPSS 0.4%

    Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

  9. 7.8CVE-2026-85848EPSS 0.4%

    Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

  10. 7.0CVE-2026-85834EPSS 0.2%

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  11. 7.8CVE-2026-85832EPSS 0.4%

    Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

  12. 5.5CVE-2026-85831EPSS 0.4%

    Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally.

  13. 7.0CVE-2026-85828EPSS 0.2%

    Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

  14. 7.0CVE-2026-85827EPSS 0.2%

    Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

  15. 7.8CVE-2026-85822EPSS 0.3%

    Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

  16. 7.8CVE-2026-85820EPSS 0.3%

    Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

  17. 9.8CVE-2026-85814EPSS 0.9%

    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

  18. 9.8CVE-2026-85809EPSS 0.9%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  19. 7.8CVE-2026-85800EPSS 0.3%

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  20. 7.2CVE-2026-85798EPSS 0.9%

    Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

  21. 7.0CVE-2026-85791EPSS 0.3%

    Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-85373EPSS 0.3%

    Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-85368EPSS 0.3%

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-85366EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  25. 7.0CVE-2026-85365EPSS 0.2%

    Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  26. 7.8CVE-2026-85358EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  27. 7.8CVE-2026-85341EPSS 0.3%

    Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

  28. 8.8CVE-2026-85339EPSS 0.5%

    Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

  29. 7.8CVE-2026-85327EPSS 0.3%

    Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-85318EPSS 0.3%

    Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  31. 9.8CVE-2026-84015EPSS 0.9%

    Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.

  32. 7.0CVE-2026-84014EPSS 0.2%

    Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

  33. 9.8CVE-2026-83935EPSS 0.9%

    Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.

  34. 7.8CVE-2026-83932EPSS 0.3%

    Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

  35. 7.8CVE-2026-83931EPSS 0.3%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

  36. 7.0CVE-2026-83921EPSS 0.3%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-83920EPSS 0.3%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  38. 7.8CVE-2026-83919EPSS 0.3%

    Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.

  39. 7.0CVE-2026-83911EPSS 0.3%

    Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-83903EPSS 0.4%

    Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-83902EPSS 0.4%

    Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-83896EPSS 0.4%

    Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

  43. 6.8CVE-2026-83895EPSS 0.5%

    Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.

  44. 7.8CVE-2026-83882EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-83881EPSS 0.4%

    Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

  46. 8.8CVE-2026-83874EPSS 0.9%

    Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.

  47. 7.0CVE-2026-83871EPSS 0.2%

    Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

  48. 7.8CVE-2026-83867EPSS 0.4%

    Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

  49. 7.8CVE-2026-83863EPSS 0.4%

    Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

  50. 7.8CVE-2026-83861EPSS 0.4%

    Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.