CWE-244 · 21 records

Improper Clearing of Heap Memory Before Release ('Heap Inspection')

CVEs in this class

21 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
64This week	CVE-2026-20349Weaponized	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilitycisco · adaptive security appliance software · CWE-244 Pre-auth Denial of service	High8.6	KEV	1.0%	Aug 11, 2026
34Monitor	CVE-2026-20039No exploit	Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerabilitycisco · adaptive security appliance software · CWE-244 Pre-auth Denial of service	High8.6	—	0.4%	Mar 4, 2026
32Monitor	CVE-2025-26304No exploit	A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.libming · libming · CWE-244 Pre-auth	High8.2	—	0.4%	Feb 20, 2025
32Monitor	CVE-2025-26305No exploit	A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a dlibming · libming · CWE-244 Pre-auth	High8.2	—	0.4%	Feb 20, 2025
30Monitor	CVE-2025-1719No exploit	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-244 Pre-auth	High7.5	—	0.4%	Jan 20, 2026
30Monitor	CVE-2025-1722No exploit	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-244 Pre-auth	High7.5	—	0.4%	Jan 20, 2026
30Monitor	CVE-2025-36118No exploit	IBM Storage Virtualize Information Disclosureibm · storage virtualize · CWE-244 Pre-auth	High7.5	—	0.4%	Nov 17, 2025
30Monitor	CVE-2025-1721No exploit	BM Concert Software Improper Clearing of Heap Memory Before Release.ibm · concert · CWE-244 Pre-auth	High7.5	—	0.3%	Dec 26, 2025
30Monitor	CVE-2025-1759No exploit	IBM Concert Software information disclosureibm · concert · CWE-244 Pre-auth	High7.5	—	0.3%	Aug 18, 2025
30Monitor	CVE-2025-70873No exploit	An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obsqlite · sqlite · CWE-244 Pre-auth	High7.5	—	0.3%	Mar 12, 2026
27Monitor	CVE-2026-48025No exploit	nebula-mesh: Decrypted CA private key persists in heap after signingjuev · nebula-mesh · CWE-244 Pre-auth	Medium6.9	—	0.5%	Jul 28, 2026
27Monitor	CVE-2025-5105No exploit	TOZED ZLT W51 Service Port 7777 heap inspectiontozed · zlt w51 · CWE-244 Pre-auth	Medium6.9	—	0.4%	May 23, 2025
26Monitor	CVE-2022-20922No exploit	Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products coucisco · secure firewall threat defense · CWE-244 Pre-auth	Medium6.5	—	0.8%	Nov 15, 2022
26Monitor	CVE-2025-45663No exploit	An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.netsurf-browser · netsurf · CWE-244 Pre-auth	Medium6.5	—	0.4%	Nov 3, 2025
23Monitor	CVE-2022-20943No exploit	Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products coucisco · secure firewall threat defense · CWE-244 Pre-auth Denial of service	Medium5.8	—	0.9%	Nov 15, 2022
23Monitor	CVE-2025-33101No exploit	Multiple Vulnerabilities in IBM Concert Software.ibm · concert · CWE-244 Pre-auth	Medium5.9	—	0.2%	Feb 17, 2026
22Monitor	CVE-2025-33013No exploit	IBM MQ Operator information disclosureibm · mq operator · CWE-244	Medium5.5	—	0.1%	Jul 24, 2025
22Monitor	CVE-2025-36083No exploit	Multiple Vulnerabilities in IBM Concert Software.ibm · concert · CWE-244	Medium5.5	—	0.1%	Oct 28, 2025
21Monitor	CVE-2023-20031No exploit	A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Softwacisco · secure firewall threat defense · CWE-244 Pre-auth	Medium5.4	—	0.3%	Nov 1, 2023
16Monitor	CVE-2023-20070No exploit	A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote atcisco · secure firewall threat defense · CWE-244 Pre-auth Denial of service	Medium4.0	—	0.5%	Nov 1, 2023
16Monitor	CVE-2023-20177No exploit	A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connecticisco · secure firewall threat defense · CWE-244 Pre-auth Denial of service	Medium4.0	—	0.5%	Nov 1, 2023

CVE-2026-20349
64This week
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
HighCVSS 8.6KEVWeaponizedEPSS 1%
- Pre-auth
- Denial of service
cisco · adaptive security appliance softwareAug 11, 2026
CVE-2026-20039
34Monitor
Cisco Adaptive Security Appliance and Firepower Threat Defense Software SSL VPN Authentication Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · adaptive security appliance softwareMar 4, 2026
CVE-2025-26304
32Monitor
A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
libming · libmingFeb 20, 2025
CVE-2025-26305
32Monitor
A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a d
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
libming · libmingFeb 20, 2025
CVE-2025-1719
30Monitor
Multiple Vulnerabilities in IBM Concert Software
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertJan 20, 2026
CVE-2025-1722
30Monitor
Multiple Vulnerabilities in IBM Concert Software
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertJan 20, 2026
CVE-2025-36118
30Monitor
IBM Storage Virtualize Information Disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · storage virtualizeNov 17, 2025
CVE-2025-1721
30Monitor
BM Concert Software Improper Clearing of Heap Memory Before Release.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertDec 26, 2025
CVE-2025-1759
30Monitor
IBM Concert Software information disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ibm · concertAug 18, 2025
CVE-2025-70873
30Monitor
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to ob
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
sqlite · sqliteMar 12, 2026
CVE-2026-48025
27Monitor
nebula-mesh: Decrypted CA private key persists in heap after signing
MediumCVSS 6.9No exploitEPSS 1%
- Pre-auth
juev · nebula-meshJul 28, 2026
CVE-2025-5105
27Monitor
TOZED ZLT W51 Service Port 7777 heap inspection
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
tozed · zlt w51May 23, 2025
CVE-2022-20922
26Monitor
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products cou
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
cisco · secure firewall threat defenseNov 15, 2022
CVE-2025-45663
26Monitor
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
netsurf-browser · netsurfNov 3, 2025
CVE-2022-20943
23Monitor
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products cou
MediumCVSS 5.8No exploitEPSS 1%
- Pre-auth
- Denial of service
cisco · secure firewall threat defenseNov 15, 2022
CVE-2025-33101
23Monitor
Multiple Vulnerabilities in IBM Concert Software.
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
ibm · concertFeb 17, 2026
CVE-2025-33013
22Monitor
IBM MQ Operator information disclosure
MediumCVSS 5.5No exploitEPSS 0%
ibm · mq operatorJul 24, 2025
CVE-2025-36083
22Monitor
Multiple Vulnerabilities in IBM Concert Software.
MediumCVSS 5.5No exploitEPSS 0%
ibm · concertOct 28, 2025
CVE-2023-20031
21Monitor
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Softwa
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
cisco · secure firewall threat defenseNov 1, 2023
CVE-2023-20070
16Monitor
A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote at
MediumCVSS 4.0No exploitEPSS 1%
- Pre-auth
- Denial of service
cisco · secure firewall threat defenseNov 1, 2023
CVE-2023-20177
16Monitor
A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connecti
MediumCVSS 4.0No exploitEPSS 1%
- Pre-auth
- Denial of service
cisco · secure firewall threat defenseNov 1, 2023

All vulnerability classes