Weaknesses of type CWE-122

2,352 results
CVE-2022-45188HIGHNetatalk through 3.1.13 has an afp_getappl heap-based buffer overflow resulting in code execution via a crafted .appl file. This provides reEPSS 0.6%CVE-2022-38432HIGHAdobe Photoshop SVG File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-49730HIGHMicrosoft Windows QoS Scheduler Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2022-35708HIGHAdobe Bridge SGI File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-29979HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 0.6%CVE-2026-35512HIGHxrdp: Heap buffer overflow in EGFX channelEPSS 0.6%CVE-2026-0006CRITICALIn multiple locations, there is a possible out of bounds read and write due to a heap buffer overflow. This could lead to remote code executEPSS 0.6%CVE-2025-24063HIGHKernel Streaming Service Driver Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2026-8175CRITICALMultiple vulnerabilities in Aspera applications.EPSS 0.6%CVE-2025-15275HIGHFontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2022-2347HIGHUnchecked Download size in UbootEPSS 0.6%CVE-2024-26239HIGHWindows Telephony Server Elevation of Privilege VulnerabilityEPSS 0.6%CVE-2025-15272HIGHFontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2025-15274HIGHFontForge SFD File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-27245MEDIUMZoom Workplace Apps and SDKs - Buffer OverflowEPSS 0.6%CVE-2024-32763MEDIUMQTS, QuTS heroEPSS 0.6%CVE-2025-49729HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 0.6%CVE-2024-42438MEDIUMZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowEPSS 0.6%CVE-2024-42436MEDIUMZoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers - Buffer OverflowEPSS 0.6%CVE-2024-7967HIGHHeap buffer overflow in Fonts in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via aEPSS 0.6%