cve.bz

CWE-122: Heap-based Buffer Overflow, page 6

Filter

The product writes past the end of a buffer that was allocated on the heap.

What the weakness is: CWE-122 at MITRE

Ask an AI about CWE-122

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-122: Heap-based Buffer Overflow and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/122.html and https://cve.bz/cve/cwe/122?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-83851EPSS 0.8%

    Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

  2. 7.8CVE-2026-83850EPSS 0.4%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2026-83847EPSS 0.3%

    Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

  4. 7.8CVE-2026-83836EPSS 0.5%

    Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.

  5. 7.8CVE-2026-83833EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  6. 7.8CVE-2026-83830EPSS 0.4%

    Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

  7. 7.8CVE-2026-83829EPSS 0.4%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

  8. 7.8CVE-2026-83828EPSS 0.4%

    Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

  9. 7.0CVE-2026-83827EPSS 0.3%

    Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

  10. 7.5CVE-2026-83795EPSS 1.3%

    Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

  11. 9.8CVE-2026-83789EPSS 0.9%

    Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

  12. 7.8CVE-2026-83783EPSS 0.4%

    Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

  13. 9.8CVE-2026-83782EPSS 1.0%

    Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.

  14. 7.8CVE-2026-83779EPSS 0.4%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  15. 8.8CVE-2026-83778EPSS 0.9%

    Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.

  16. 8.8CVE-2026-83777EPSS 0.6%

    Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.

  17. 7.0CVE-2026-83775EPSS 0.2%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

  18. 9.8CVE-2026-83770EPSS 1.1%

    Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

  19. 7.8CVE-2026-83768EPSS 0.4%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  20. 7.8CVE-2026-83758EPSS 0.4%

    Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

  21. 7.8CVE-2026-83757EPSS 0.4%

    Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

  22. 7.5CVE-2026-83754EPSS 0.7%

    Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

  23. 7.8CVE-2026-83753EPSS 0.4%

    Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

  24. 7.0CVE-2026-83750EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

  25. 9.8CVE-2026-83748EPSS 0.9%

    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

  26. 5.5CVE-2026-83736EPSS 0.5%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  27. 8.8CVE-2026-83725EPSS 0.8%

    Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

  28. 7.0CVE-2026-83724EPSS 0.3%

    Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

  29. 8.8CVE-2026-83716EPSS 0.4%

    Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

  30. 7.8CVE-2026-83709EPSS 0.4%

    Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2026-83698EPSS 0.4%

    Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

  32. 9.8CVE-2026-83693EPSS 1.1%

    Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

  33. 7.8CVE-2026-83692EPSS 0.4%

    Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

  34. 7.8CVE-2026-83691EPSS 0.4%

    Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

  35. 8.8CVE-2026-83688EPSS 0.9%

    Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

  36. 7.0CVE-2026-83680EPSS 0.3%

    Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2026-83678EPSS 0.4%

    Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

  38. 7.0CVE-2026-83676EPSS 0.3%

    Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

  39. 7.8CVE-2026-83652EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

  40. 7.8CVE-2026-83650EPSS 0.4%

    Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2026-83641EPSS 0.4%

    Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

  42. 7.8CVE-2026-83640EPSS 0.4%

    Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

  43. 7.8CVE-2026-83639EPSS 0.4%

    Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  44. 7.8CVE-2026-83638EPSS 0.4%

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  45. 7.8CVE-2026-83588EPSS 0.4%

    Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

  46. 7.0CVE-2026-83580EPSS 0.3%

    Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

  47. 7.8CVE-2026-83579EPSS 0.4%

    Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

  48. 9.8CVE-2026-83578EPSS 1.1%

    Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

  49. 7.8CVE-2026-83569EPSS 0.4%

    Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.

  50. 9.8CVE-2026-83523EPSS 0.9%

    Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.