KEV 2026.10.301,766 entries+10 in 7d11 open federal deadlinesas of / search ? keys
KEV Now

Weakness / #3

CWE-787: Out-of-bounds write in CISA KEV

Out-of-bounds Write

Catalog
2026.10.30
Rank
#3 of 198
MITRE
CWE-787 definition

Answer 106 KEV entries list CWE-787 (Out-of-bounds write) as of catalog 2026.10.30, 6% of the catalog and rank 3 of 198 weaknesses. The most affected vendor is Microsoft (26).

The software writes data past the end or before the start of a buffer, corrupting memory.

KEV entries
1066% of catalog
Vendors
21affected
Ransomware: known
1615.1%
First added
2021-11-03
Latest added
2026-10-27

VVendors

Vendors with CWE-787 KEV entries
VendorEntriesShare
Microsoft2624.5%
Apple2523.6%
Google2018.9%
Adobe76.6%
Linux54.7%
Fortinet32.8%
Samsung32.8%
WatchGuard21.9%
VMware21.9%
Arm21.9%
Palo Alto Networks10.9%
Broadcom10.9%

TAdditions by year

CWE-787 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 34; 2022: 35; 2023: 9; 2024: 7; 2025: 11; 2026: 10.0102030402021: 34 added3420212022: 35 added3520222023: 9 added920232024: 7 added720242025: 11 added1120252026: 10 added (year to date)102026
CWE-787 KEV additions by year
YearAdded
202134
202235
20239
20247
202511
202610

PProducts

Products with CWE-787 KEV entries
ProductEntriesShare
Apple Multiple Products1312.3%
Microsoft Windows1312.3%
Google Chromium V81110.4%
Linux Kernel54.7%
Microsoft Internet Explorer54.7%
Apple iOS, iPadOS, and macOS43.8%
Adobe Flash Player43.8%
Microsoft Win32k43.8%

EAll entries

KEV entries listing CWE-787
CVEVendorProductAddedRansomware
CVE-2026-111497GoogleBrotli NewUnknown
CVE-2026-86950AppleMultiple ProductsUnknown
CVE-2026-53266LinuxKernelUnknown
CVE-2026-87491GoogleChromium V8Unknown
CVE-2025-25249FortinetMultiple ProductsUnknown
CVE-2022-0995LinuxKernelUnknown
CVE-2026-11645GoogleChromium V8Unknown
CVE-2026-0300Palo Alto NetworksPAN-OSUnknown
CVE-2026-3909GoogleSkiaUnknown
CVE-2024-37079BroadcomVMware vCenter ServerUnknown
CVE-2025-14733WatchGuardFireboxKnown
CVE-2025-9242WatchGuardFireboxUnknown
CVE-2025-21042SamsungMobile DevicesUnknown
CVE-2021-22555LinuxKernelUnknown
CVE-2025-21043SamsungMobile DevicesUnknown
CVE-2025-43300AppleiOS, iPadOS, and macOSUnknown
CVE-2025-5419GoogleChromium V8Unknown
CVE-2025-27363FreeTypeFreeTypeUnknown
CVE-2024-53197LinuxKernelUnknown
CVE-2025-24201AppleMultiple ProductsUnknown
CVE-2024-53104LinuxKernelUnknown
CVE-2024-4761GoogleChromium V8Unknown
CVE-2024-23296AppleMultiple ProductsUnknown
CVE-2024-23225AppleMultiple ProductsUnknown
CVE-2024-21762FortinetFortiOSKnown
CVE-2023-34048VMwarevCenter ServerUnknown
CVE-2024-0519GoogleChromium V8Unknown
CVE-2023-7024GoogleChromium WebRTCUnknown
CVE-2023-42917AppleMultiple ProductsUnknown
CVE-2023-20109CiscoIOS and IOS XEUnknown
CVE-2023-5217GoogleChromium libvpxUnknown
CVE-2023-26369AdobeAcrobat and ReaderUnknown
CVE-2023-4863GoogleChromium WebPUnknown
CVE-2021-25372SamsungMobile DevicesUnknown
CVE-2023-32435AppleMultiple ProductsUnknown
CVE-2023-28206AppleiOS, iPadOS, and macOSUnknown
CVE-2021-30900AppleiOS, iPadOS, and macOSUnknown
CVE-2022-4135GoogleChromium GPUUnknown
CVE-2022-41128MicrosoftWindowsUnknown
CVE-2022-41125MicrosoftWindowsUnknown
CVE-2022-41073MicrosoftWindowsKnown
CVE-2022-42827AppleiOS and iPadOSUnknown
CVE-2022-37969MicrosoftWindowsKnown
CVE-2022-32917AppleiOS, iPadOS, and macOSUnknown
CVE-2021-38406Delta ElectronicsDOPSoft 2Unknown
CVE-2022-32894AppleiOS and macOSUnknown
CVE-2022-32893AppleiOS and macOSUnknown
CVE-2021-4034Red HatPolkitKnown
CVE-2020-9907AppleMultiple ProductsUnknown
CVE-2020-3837AppleMultiple ProductsUnknown
CVE-2019-5825GoogleChromium V8Unknown
CVE-2018-6065GoogleChromium V8Unknown
CVE-2018-17480GoogleChromium V8Unknown
CVE-2016-5198GoogleChromium V8Unknown
CVE-2012-0754AdobeFlash PlayerUnknown
CVE-2011-2462AdobeReader and AcrobatUnknown
CVE-2010-1297AdobeFlash PlayerUnknown
CVE-2021-30883AppleMultiple ProductsUnknown
CVE-2020-1027MicrosoftWindowsUnknown
CVE-2019-7287AppleiOSUnknown
CVE-2019-7286AppleMultiple ProductsUnknown
CVE-2018-5002AdobeFlash PlayerUnknown
CVE-2022-24521MicrosoftWindowsKnown
CVE-2021-39793GooglePixelUnknown
CVE-2018-8373MicrosoftInternet Explorer Scripting EngineUnknown
CVE-2019-16928EximExim Internet MailerUnknown
CVE-2015-3043AdobeFlash PlayerUnknown
CVE-2013-0640AdobeReader and AcrobatUnknown
CVE-2018-8174MicrosoftWindowsKnown
CVE-2022-21882MicrosoftWin32kKnown
CVE-2022-22587AppleiOS and macOSUnknown
CVE-2018-13383FortinetFortiOS and FortiProxyKnown
CVE-2021-35211SolarWindsServ-UKnown
CVE-2021-34448MicrosoftWindowsUnknown
CVE-2021-33742MicrosoftWindowsUnknown
CVE-2021-31956MicrosoftWindowsUnknown
CVE-2021-31755TendaAC11 RouterUnknown
CVE-2021-30807AppleMultiple ProductsUnknown
CVE-2021-30761AppleiOSUnknown
CVE-2021-30665AppleMultiple ProductsUnknown
CVE-2021-28664ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2021-28310MicrosoftWin32kUnknown
CVE-2021-27562ArmTrusted FirmwareUnknown
CVE-2021-1732MicrosoftWin32kKnown
CVE-2020-9819AppleiOS, iPadOS, and watchOSUnknown
CVE-2020-9818AppleiOS, iPadOS, and watchOSUnknown
CVE-2020-27930AppleMultiple ProductsUnknown
CVE-2020-16013GoogleChromium V8Unknown
CVE-2020-16010GoogleChrome for Android UIUnknown
CVE-2020-16009GoogleChromium V8Unknown
CVE-2020-15999GoogleChrome FreeTypeUnknown
CVE-2020-14871OracleSolaris and Zettabyte File System (ZFS)Unknown
CVE-2020-1380MicrosoftInternet ExplorerUnknown
CVE-2020-1054MicrosoftWin32kUnknown
CVE-2020-1020MicrosoftWindowsUnknown
CVE-2020-0986MicrosoftWindowsUnknown
CVE-2020-0968MicrosoftInternet ExplorerKnown
CVE-2020-0938MicrosoftWindowsUnknown
CVE-2020-0878MicrosoftEdge and Internet ExplorerKnown
CVE-2020-0069MediaTekMultiple ChipsetsUnknown
CVE-2019-5544VMwareVMware ESXi and Horizon DaaSKnown
CVE-2019-1429MicrosoftInternet ExplorerUnknown
CVE-2019-1367MicrosoftInternet ExplorerKnown
CVE-2018-8653MicrosoftInternet ExplorerUnknown
CVE-2018-0802MicrosoftOfficeKnown
CVE-2018-0798MicrosoftOfficeUnknown

Cite this

106 CISA KEV entries list CWE-787 (Out-of-bounds write), 6% of the catalog. Source: KEV Now analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.10.30 (released 2026-10-30). https://kevnow.com/cwe/cwe-787/

Source: CISA KEV catalog v2026.10.30, released 2026-10-30. Windows end 2026-10-30.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings