KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #5

CWE-119: Memory buffer bounds error in CISA KEV

Improper Restriction of Operations within the Bounds of a Memory Buffer

Catalog
2026.10.30
Rank
#5 of 198
MITRE
CWE-119 definition

Answer 88 KEV entries list CWE-119 (Memory buffer bounds error) as of catalog 2026.10.30, 5% of the catalog and rank 5 of 198 weaknesses. The most affected vendor is Microsoft (34).

The software reads or writes memory outside the buffer it is meant to use.

KEV entries
885% of catalog
Vendors
18affected
Ransomware: known
910.2%
First added
2021-11-03
Latest added
2026-10-04

VVendors

Vendors with CWE-119 KEV entries
VendorEntriesShare
Microsoft3438.6%
Cisco1213.6%
Adobe1011.4%
Citrix89.1%
Apple78%
Google22.3%
NETGEAR22.3%
Mozilla22.3%
Exim22.3%
Looking Glass11.1%
Linux11.1%
Arm11.1%

TAdditions by year

CWE-119 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 8; 2022: 64; 2023: 3; 2024: 2; 2025: 3; 2026: 8.0204060802021: 8 added820212022: 64 added6420222023: 3 added320232024: 2 added220242025: 3 added320252026: 8 added (year to date)82026
CWE-119 KEV additions by year
YearAdded
20218
202264
20233
20242
20253
20268

PProducts

Products with CWE-119 KEV entries
ProductEntriesShare
Cisco IOS and IOS XE Software89.1%
Microsoft Office89.1%
Microsoft Windows78%
Microsoft Internet Explorer66.8%
Adobe Acrobat and Reader55.7%
Citrix NetScaler44.5%
Adobe Flash Player44.5%
Citrix NetScaler ADC and NetScaler Gateway33.4%

EAll entries

KEV entries listing CWE-119
CVEVendorProductAddedRansomware
CVE-2026-88779CitrixNetScalerUnknown
CVE-2026-88772CitrixNetScalerUnknown
CVE-2026-88771CitrixNetScalerUnknown
CVE-2026-8452CitrixNetScaler ADC and NetScaler GatewayUnknown
CVE-2009-3459AdobeAcrobat and ReaderUnknown
CVE-2025-31277AppleMultiple ProductsUnknown
CVE-2026-3910GoogleChromium V8Unknown
CVE-2026-20700AppleMultiple ProductsUnknown
CVE-2025-7775CitrixNetScalerUnknown
CVE-2014-3931Looking GlassMulti-Router Looking Glass (MRLG)Unknown
CVE-2025-6543CitrixNetScaler ADC and GatewayUnknown
CVE-2017-1000253LinuxKernelKnown
CVE-2023-6549CitrixNetScaler ADC and NetScaler GatewayUnknown
CVE-2023-4966CitrixNetScaler ADC and NetScaler GatewayKnown
CVE-2017-6742CiscoIOS and IOS XE SoftwareUnknown
CVE-2022-22706ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2013-2597Code AuroraACDB Audio DriverUnknown
CVE-2018-7445MikroTikRouterOSUnknown
CVE-2021-30983AppleiOS and iPadOSUnknown
CVE-2018-4344AppleMultiple ProductsUnknown
CVE-2017-6862NETGEARMultiple DevicesUnknown
CVE-2016-1646GoogleChromium V8Unknown
CVE-2013-1331MicrosoftOfficeUnknown
CVE-2012-1889MicrosoftXML Core ServicesUnknown
CVE-2010-2883AdobeAcrobat and ReaderUnknown
CVE-2010-2572MicrosoftPowerPointUnknown
CVE-2009-3953AdobeAcrobat and ReaderUnknown
CVE-2009-0563MicrosoftOfficeUnknown
CVE-2007-5659AdobeAcrobat and ReaderUnknown
CVE-2015-2425MicrosoftInternet ExplorerUnknown
CVE-2015-2360MicrosoftWin32kUnknown
CVE-2014-8439AdobeFlash PlayerUnknown
CVE-2017-0149MicrosoftInternet ExplorerUnknown
CVE-2017-0005MicrosoftWindowsUnknown
CVE-2016-6366CiscoAdaptive Security Appliance (ASA)Unknown
CVE-2016-4657AppleiOSUnknown
CVE-2019-8720WebKitGTKWebKitGTKUnknown
CVE-2016-4523TrihedralVTScada (formerly VTS)Unknown
CVE-2015-3113AdobeFlash PlayerUnknown
CVE-2015-2502MicrosoftInternet ExplorerUnknown
CVE-2016-7201MicrosoftEdgeUnknown
CVE-2016-7200MicrosoftEdgeUnknown
CVE-2016-0189MicrosoftInternet ExplorerKnown
CVE-2015-2426MicrosoftWindowsUnknown
CVE-2015-2419MicrosoftInternet ExplorerUnknown
CVE-2013-3660MicrosoftWin32kUnknown
CVE-2013-1690MozillaFirefox and ThunderbirdUnknown
CVE-2012-2034AdobeFlash PlayerUnknown
CVE-2010-4398MicrosoftWindowsUnknown
CVE-2016-10174NETGEARWNR2000v5 RouterUnknown
CVE-2014-6332MicrosoftWindowsUnknown
CVE-2010-4344EximEximUnknown
CVE-2017-0101MicrosoftWindowsKnown
CVE-2015-2546MicrosoftWin32kKnown
CVE-2018-0175CiscoIOS, XR, and XE SoftwareUnknown
CVE-2018-0167CiscoIOS, XR, and XE SoftwareUnknown
CVE-2018-0151CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-8540MicrosoftMalware Protection EngineUnknown
CVE-2017-6744CiscoIOS softwareUnknown
CVE-2017-6743CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6740CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6739CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6738CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6737CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6736CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-11826MicrosoftOfficeUnknown
CVE-2016-7193MicrosoftOfficeUnknown
CVE-2015-5119AdobeFlash PlayerUnknown
CVE-2015-2424MicrosoftPowerPointUnknown
CVE-2015-1642MicrosoftOfficeUnknown
CVE-2013-3346AdobeReader and AcrobatUnknown
CVE-2013-1675MozillaFirefoxUnknown
CVE-2011-1889MicrosoftForefront Threat Management Gateway (TMG)Unknown
CVE-2010-3333MicrosoftOfficeUnknown
CVE-2008-2992AdobeAcrobat and ReaderKnown
CVE-2017-0222MicrosoftInternet ExplorerUnknown
CVE-2014-1761MicrosoftWordUnknown
CVE-2020-0796MicrosoftSMBv3Known
CVE-2014-4404AppleOS XUnknown
CVE-2021-22991F5BIG-IP Traffic Management MicrokernelUnknown
CVE-2021-33771MicrosoftWindowsUnknown
CVE-2021-31979MicrosoftWindowsUnknown
CVE-2021-30666AppleiOSUnknown
CVE-2020-29557D-LinkDIR-825 R1 DevicesUnknown
CVE-2018-6789EximEximKnown
CVE-2017-7269MicrosoftInternet Information Services (IIS)Unknown
CVE-2017-11882MicrosoftOfficeKnown
CVE-2017-11774MicrosoftOfficeUnknown

Cite this

88 CISA KEV entries list CWE-119 (Memory buffer bounds error), 5% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-119/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings