Heap Buffer Overflow
3,089 CVEs across 85 months on the top 50 list since Oct 2009. Peak rank #14 in Jul 2024.
CWE-122 CVEs per month since Oct 2009
Oct 2021: 16 CVEs · rank #24Nov 2021: 6 CVEs · rank #48Dec 2021: 10 CVEs · rank #41Jan 2022: 22 CVEs · rank #20Feb 2022: 21 CVEs · rank #23Mar 2022: 10 CVEs · rank #42Apr 2022: 30 CVEs · rank #17May 2022: 13 CVEs · rank #30Jun 2022: 11 CVEs · rank #38Jul 2022: 18 CVEs · rank #23Aug 2022: 9 CVEs · rank #47Sep 2022: 31 CVEs · rank #18Oct 2022: not on the top 50 that monthNov 2022: not on the top 50 that monthDec 2022: 17 CVEs · rank #28Jan 2023: 36 CVEs · rank #18Feb 2023: 29 CVEs · rank #17Mar 2023: not on the top 50 that monthApr 2023: 26 CVEs · rank #22May 2023: 10 CVEs · rank #45Jun 2023: 22 CVEs · rank #24Jul 2023: 24 CVEs · rank #20Aug 2023: 15 CVEs · rank #31Sep 2023: 17 CVEs · rank #27Oct 2023: 14 CVEs · rank #36Nov 2023: 16 CVEs · rank #28Dec 2023: 15 CVEs · rank #31Jan 2024: 22 CVEs · rank #28Feb 2024: 45 CVEs · rank #17Mar 2024: 26 CVEs · rank #26Apr 2024: 63 CVEs · rank #15May 2024: 83 CVEs · rank #15Jun 2024: 25 CVEs · rank #27Jul 2024: 57 CVEs · rank #14Aug 2024: 39 CVEs · rank #19Sep 2024: 33 CVEs · rank #20Oct 2024: 41 CVEs · rank #20Nov 2024: 65 CVEs · rank #16Dec 2024: 33 CVEs · rank #22Jan 2025: 60 CVEs · rank #17Feb 2025: 34 CVEs · rank #26Mar 2025: 51 CVEs · rank #22Apr 2025: 44 CVEs · rank #25May 2025: 31 CVEs · rank #28Jun 2025: 36 CVEs · rank #27Jul 2025: 72 CVEs · rank #17Aug 2025: 66 CVEs · rank #19Sep 2025: 46 CVEs · rank #29Oct 2025: 33 CVEs · rank #30Nov 2025: 43 CVEs · rank #21Dec 2025: 45 CVEs · rank #26Jan 2026: 56 CVEs · rank #29Feb 2026: 75 CVEs · rank #22Mar 2026: 88 CVEs · rank #25Apr 2026: 89 CVEs · rank #25May 2026: 104 CVEs · rank #24Jun 2026: 113 CVEs · rank #22Jul 2026: 196 CVEs · rank #17Aug 2026: 224 CVEs · rank #17Sep 2026 so far: 414 CVEs · rank #4
Year by year
Each year's months on the top 50 list of weakness classes. Pick a year to read it in the lens.
The record
- Peak rank
- #14 in Jul 2024
- Busiest month
- Sep 2026, 414 CVEs
- First on the list
- Oct 2009
- On the top 50 list
- 85 of 204 monthly snapshots