CWE-122— Heap-based Buffer Overflow
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().— MITRE CWE catalog
2,574 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-122page 30 of 52
- CVE-2025-21184HIGHCVSS 7.0EG 7.02025-02-11
Windows Core Messaging Elevation of Privileges Vulnerability
- CVE-2025-21186HIGHCVSS 7.8EG 7.82025-01-14
Microsoft Access Remote Code Execution Vulnerability
- CVE-2025-21190HIGHCVSS 8.8EG 8.82025-02-11
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21200HIGHCVSS 8.8EG 8.82025-02-11
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21205HIGHCVSS 8.8EG 8.82025-04-08
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- CVE-2025-21208HIGHCVSS 8.8EG 8.82025-02-11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-21221HIGHCVSS 8.8EG 8.82025-04-08
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- CVE-2025-21222HIGHCVSS 8.8EG 8.82025-04-08
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network.
- CVE-2025-21223HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21233HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21236HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21237HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21238HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21239HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21240HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21241HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21245HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21246HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21248HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21250HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21252HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21256MEDIUMCVSS 6.6EG 6.62025-01-14
Windows Digital Media Elevation of Privilege Vulnerability
- CVE-2025-21266HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21273HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21282HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21286HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21302HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21303HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21305HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21306HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21333CRITICALCVSS 7.8EG 9.0⚠ KEV2025-01-14
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
- CVE-2025-21339HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21356HIGHCVSS 7.8EG 7.82025-01-14
Microsoft Office Visio Remote Code Execution Vulnerability
- CVE-2025-21368HIGHCVSS 8.8EG 8.82025-02-11
Microsoft Digest Authentication Remote Code Execution Vulnerability
- CVE-2025-21369HIGHCVSS 8.8EG 8.82025-02-11
Microsoft Digest Authentication Remote Code Execution Vulnerability
- CVE-2025-21371HIGHCVSS 8.8EG 8.82025-02-11
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21375HIGHCVSS 7.8EG 7.82025-02-11
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- CVE-2025-21376HIGHCVSS 8.1EG 8.12025-02-11
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
- CVE-2025-21378HIGHCVSS 7.8EG 7.82025-01-14
Windows CSC Service Elevation of Privilege Vulnerability
- CVE-2025-21382HIGHCVSS 7.8EG 7.82025-01-14
Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2025-21390HIGHCVSS 7.8EG 7.82025-02-11
Microsoft Excel Remote Code Execution Vulnerability
- CVE-2025-21395HIGHCVSS 7.8EG 7.82025-01-14
Microsoft Access Remote Code Execution Vulnerability
- CVE-2025-21407HIGHCVSS 8.8EG 8.82025-02-11
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21409HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21410HIGHCVSS 8.8EG 8.82025-02-11
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2025-21411HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21413HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21414HIGHCVSS 7.0EG 7.02025-02-11
Windows Core Messaging Elevation of Privileges Vulnerability
- CVE-2025-21417HIGHCVSS 8.8EG 8.82025-01-14
Windows Telephony Service Remote Code Execution Vulnerability
- CVE-2025-21418CRITICALCVSS 7.8EG 9.0⚠ KEV2025-02-11
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Map vulnerabilities like CWE-122 to your infrastructure
EchelonGraph correlates every CVE — across CWE-122 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →