KEV 2026.09.231,721 entries+8 in 7d8 open federal deadlinesas of / search ? keys
Telemetry

Weakness / #5

CWE-119: Memory buffer bounds error in CISA KEV

Improper Restriction of Operations within the Bounds of a Memory Buffer

Catalog
2026.09.23
Rank
#5 of 185
MITRE
CWE-119 definition

Answer 85 KEV entries list CWE-119 (Memory buffer bounds error) as of catalog 2026.09.23, 4.9% of the catalog and rank 5 of 185 weaknesses. The most affected vendor is Microsoft (34).

The software reads or writes memory outside the buffer it is meant to use.

KEV entries
854.9% of catalog
Vendors
18affected
Ransomware: known
910.6%
First added
2021-11-03
Latest added
2026-08-26

VVendors

Vendors with CWE-119 KEV entries
VendorEntriesShare
Microsoft3440%
Cisco1214.1%
Adobe1011.8%
Apple78.2%
Citrix55.9%
Google22.4%
NETGEAR22.4%
Mozilla22.4%
Exim22.4%
Looking Glass11.2%
Linux11.2%
Arm11.2%

TAdditions by year

CWE-119 KEV additions per yearColumn chart of KEV additions per calendar year. 2021: 8; 2022: 64; 2023: 3; 2024: 2; 2025: 3; 2026: 5.0204060802021: 8 added820212022: 64 added6420222023: 3 added320232024: 2 added220242025: 3 added320252026: 5 added (year to date)52026
CWE-119 KEV additions by year
YearAdded
20218
202264
20233
20242
20253
20265

PProducts

Products with CWE-119 KEV entries
ProductEntriesShare
Cisco IOS and IOS XE Software89.4%
Microsoft Office89.4%
Microsoft Windows78.2%
Microsoft Internet Explorer67.1%
Adobe Acrobat and Reader55.9%
Adobe Flash Player44.7%
Citrix NetScaler ADC and NetScaler Gateway33.5%
Apple Multiple Products33.5%

EAll entries

KEV entries listing CWE-119
CVEVendorProductAddedRansomware
CVE-2026-8452CitrixNetScaler ADC and NetScaler GatewayUnknown
CVE-2009-3459AdobeAcrobat and ReaderUnknown
CVE-2025-31277AppleMultiple ProductsUnknown
CVE-2026-3910GoogleChromium V8Unknown
CVE-2026-20700AppleMultiple ProductsUnknown
CVE-2025-7775CitrixNetScalerUnknown
CVE-2014-3931Looking GlassMulti-Router Looking Glass (MRLG)Unknown
CVE-2025-6543CitrixNetScaler ADC and GatewayUnknown
CVE-2017-1000253LinuxKernelKnown
CVE-2023-6549CitrixNetScaler ADC and NetScaler GatewayUnknown
CVE-2023-4966CitrixNetScaler ADC and NetScaler GatewayKnown
CVE-2017-6742CiscoIOS and IOS XE SoftwareUnknown
CVE-2022-22706ArmMali Graphics Processing Unit (GPU)Unknown
CVE-2013-2597Code AuroraACDB Audio DriverUnknown
CVE-2018-7445MikroTikRouterOSUnknown
CVE-2021-30983AppleiOS and iPadOSUnknown
CVE-2018-4344AppleMultiple ProductsUnknown
CVE-2017-6862NETGEARMultiple DevicesUnknown
CVE-2016-1646GoogleChromium V8Unknown
CVE-2013-1331MicrosoftOfficeUnknown
CVE-2012-1889MicrosoftXML Core ServicesUnknown
CVE-2010-2883AdobeAcrobat and ReaderUnknown
CVE-2010-2572MicrosoftPowerPointUnknown
CVE-2009-3953AdobeAcrobat and ReaderUnknown
CVE-2009-0563MicrosoftOfficeUnknown
CVE-2007-5659AdobeAcrobat and ReaderUnknown
CVE-2015-2425MicrosoftInternet ExplorerUnknown
CVE-2015-2360MicrosoftWin32kUnknown
CVE-2014-8439AdobeFlash PlayerUnknown
CVE-2017-0149MicrosoftInternet ExplorerUnknown
CVE-2017-0005MicrosoftWindowsUnknown
CVE-2016-6366CiscoAdaptive Security Appliance (ASA)Unknown
CVE-2016-4657AppleiOSUnknown
CVE-2019-8720WebKitGTKWebKitGTKUnknown
CVE-2016-4523TrihedralVTScada (formerly VTS)Unknown
CVE-2015-3113AdobeFlash PlayerUnknown
CVE-2015-2502MicrosoftInternet ExplorerUnknown
CVE-2016-7201MicrosoftEdgeUnknown
CVE-2016-7200MicrosoftEdgeUnknown
CVE-2016-0189MicrosoftInternet ExplorerKnown
CVE-2015-2426MicrosoftWindowsUnknown
CVE-2015-2419MicrosoftInternet ExplorerUnknown
CVE-2013-3660MicrosoftWin32kUnknown
CVE-2013-1690MozillaFirefox and ThunderbirdUnknown
CVE-2012-2034AdobeFlash PlayerUnknown
CVE-2010-4398MicrosoftWindowsUnknown
CVE-2016-10174NETGEARWNR2000v5 RouterUnknown
CVE-2014-6332MicrosoftWindowsUnknown
CVE-2010-4344EximEximUnknown
CVE-2017-0101MicrosoftWindowsKnown
CVE-2015-2546MicrosoftWin32kKnown
CVE-2018-0175CiscoIOS, XR, and XE SoftwareUnknown
CVE-2018-0167CiscoIOS, XR, and XE SoftwareUnknown
CVE-2018-0151CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-8540MicrosoftMalware Protection EngineUnknown
CVE-2017-6744CiscoIOS softwareUnknown
CVE-2017-6743CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6740CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6739CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6738CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6737CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-6736CiscoIOS and IOS XE SoftwareUnknown
CVE-2017-11826MicrosoftOfficeUnknown
CVE-2016-7193MicrosoftOfficeUnknown
CVE-2015-5119AdobeFlash PlayerUnknown
CVE-2015-2424MicrosoftPowerPointUnknown
CVE-2015-1642MicrosoftOfficeUnknown
CVE-2013-3346AdobeReader and AcrobatUnknown
CVE-2013-1675MozillaFirefoxUnknown
CVE-2011-1889MicrosoftForefront Threat Management Gateway (TMG)Unknown
CVE-2010-3333MicrosoftOfficeUnknown
CVE-2008-2992AdobeAcrobat and ReaderKnown
CVE-2017-0222MicrosoftInternet ExplorerUnknown
CVE-2014-1761MicrosoftWordUnknown
CVE-2020-0796MicrosoftSMBv3Known
CVE-2014-4404AppleOS XUnknown
CVE-2021-22991F5BIG-IP Traffic Management MicrokernelUnknown
CVE-2021-33771MicrosoftWindowsUnknown
CVE-2021-31979MicrosoftWindowsUnknown
CVE-2021-30666AppleiOSUnknown
CVE-2020-29557D-LinkDIR-825 R1 DevicesUnknown
CVE-2018-6789EximEximKnown
CVE-2017-7269MicrosoftInternet Information Services (IIS)Unknown
CVE-2017-11882MicrosoftOfficeKnown
CVE-2017-11774MicrosoftOfficeUnknown

Cite this

85 CISA KEV entries list CWE-119 (Memory buffer bounds error), 4.9% of the catalog. Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/cwe/cwe-119/

Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23.

Keyboard shortcuts

Keyboard shortcuts
/Focus search
?Show this panel
EscClose panel or clear search
g dGo to Dashboard
g kGo to KEV
g vGo to Vendors
g pGo to Products
g wGo to Weaknesses
g sGo to Stats
g rGo to Regulations
g bGo to Briefings
g aGo to API