Class familyCisco · Adaptive Security Appliance (ASA)
Cisco ASA buffer overflow flaws, 2016–2026
5 Adaptive Security Appliance (ASA) CVEs with CWE-120 weaknesses, 18 Aug 2016 to 4 Mar 2026. 2 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2016’16
2017’17
2018’18
2019’19
2020’20
1 2021’21
1 2022’22
2023’23
2024’24
1 2025’25
1 2026’26
In CISA KEVNot in KEV
20161 CVE, 1 in KEV
20211 CVE
20221 CVE
20251 CVE, 1 in KEV
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2016-6366KEV | 18 Aug 2016 | Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability | Grouped by weakness | 69.1 |
| CVE-2021-1493 | 29 Apr 2021 | Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial… | Grouped by weakness | 19.6 |
| CVE-2022-20927 | 10 Nov 2022 | A vulnerability in the SSL/TLS client of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat… | Grouped by weakness | 14.5 |
| CVE-2025-20333KEV | 25 Sep 2025 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow… | Grouped by weakness | 79.8 |
| CVE-2026-20100 | 4 Mar 2026 | A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security… | Grouped by weakness | 10.6 |