CWE-122: Heap-based Buffer Overflow vulnerabilities

1,842 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.8	EPSS 0.3%	CVE-2026-61359Microsoft Windows 11 version 23H2 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-61359 Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.5	EPSS 0.7%	CVE-2026-61363Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.5EPSS 0.7%2026-08-11CVE Database V5CVE-2026-61363 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. EPSS 0.7%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-58651Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-58651 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-70347Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-70347 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-70345Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-70345 Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
Medium	6.7	EPSS 0.3%	CVE-2026-70330Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow Medium6.7EPSS 0.3%2026-08-11CVE Database V5CVE-2026-70330 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
Medium	6.7	EPSS 0.3%	CVE-2026-70304Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow Medium6.7EPSS 0.3%2026-08-11CVE Database V5CVE-2026-70304 Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-68815Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-68815 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-68807Microsoft Office 365 for Mac · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-68807 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-68800Microsoft Office 365 for Mac · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-68800 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-68796Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-68796 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-68794Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-68794 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-66799Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-66799 Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65814Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65814 Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65787Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65787 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65786Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65786 Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65672Microsoft Windows 11 version 23H2 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65672 Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.3%	CVE-2026-65671Microsoft Windows 10 Version 1607 · Heap-based Buffer Overflow High7.8EPSS 0.3%2026-08-11CVE Database V5CVE-2026-65671 Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally. EPSS 0.3%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-65664Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-65664 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11
High	7.8	EPSS 0.5%	CVE-2026-65661Microsoft 365 Apps for Enterprise · Heap-based Buffer Overflow High7.8EPSS 0.5%2026-08-11CVE Database V5CVE-2026-65661 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2026-08-11

Page 48 of 94