CVE-2026-111380 | High | 8.8 | 2026-10-16 | FreeRDP from 3.29.0 before 3.32.0 contains an integer overflow in the Apple audin backends (audin_mac.m, audin_ios.m), which compute the audio queue buffer siz… |
CVE-2026-111282 | High | 8.2 | 2026-10-15 | Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets unauthenticated attackers bypass the file path l… |
CVE-2026-92160 | Medium | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink… |
CVE-2026-92158 | High | 7.2 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FpySequencer… |
CVE-2026-92157 | Medium | 6.5 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileDownlink… |
CVE-2026-92154 | High | 8.1 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink ha… |
CVE-2026-107348 | Medium | 5.9 | 2026-10-14 | Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows a remote attacker to cause a denial of service w… |
CVE-2026-101972 | Medium | 6.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticate… |
CVE-2026-102036 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved allows a configured EVPN BGP peer to cau… |
CVE-2026-102024 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the routing daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated BGP peer… |
CVE-2026-101945 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows a remote attacker with an establish… |
CVE-2026-101944 | High | 7.5 | 2026-10-14 | An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker to ca… |
CVE-2026-53615 | High | 8.0 | 2026-10-14 | util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, `parse_dos_extended()` in `libblkid/src/partitions/dos.c` computes an extended-… |
CVE-2026-49206 | Low | 2.9 | 2026-10-14 | rapidcsv is a C++ CSV parser library. Prior to 8.99, RemoveColumn, InsertColumn, RemoveRow, InsertRow, and GetColumnNames converted size_t indexes to int befor… |
CVE-2026-110449 | High | 7.5 | 2026-10-14 | Nix before 2.35.3 and Lix before 2.95.4 have an integer overflow and resultant out-of-bounds write when evaluating untrusted expressions because list allocatio… |
CVE-2026-100136 | High | 7.5 | 2026-10-13 | CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could… |
CVE-2026-95636 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-88088 | High | 7.0 | 2026-10-13 | Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-83661 | High | 7.8 | 2026-10-13 | Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current us… |
CVE-2026-14532 | Medium | 4.3 | 2026-10-13 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught e… |
CVE-2026-97778 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-97753 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-96943 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. |
CVE-2026-96915 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally. |
CVE-2026-96914 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-96217 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96118 | High | 7.8 | 2026-10-13 | Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-88186 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-88166 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88163 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. |
CVE-2026-88145 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-88118 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-88074 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-87702 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85908 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. |
CVE-2026-85820 | High | 7.8 | 2026-10-13 | Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-85807 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-85363 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-83918 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-83877 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. |
CVE-2026-83847 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. |
CVE-2026-83828 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-83725 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-83688 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network. |
CVE-2026-83578 | Critical | 9.8 | 2026-10-13 | Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
CVE-2026-83573 | Medium | 6.8 | 2026-10-13 | Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-70269 | High | 8.1 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-70258 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-70257 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
CVE-2026-70149 | High | 8.8 | 2026-10-13 | Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose informatio… |
CVE-2026-70113 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70052 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. |
CVE-2026-70008 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69966 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69963 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69957 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69934 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-69916 | High | 7.8 | 2026-10-13 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-69521 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
CVE-2026-69354 | High | 7.8 | 2026-10-13 | Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-110036 | Low | 3.3 | 2026-10-13 | A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted de… |
CVE-2026-108400 | High | 8.8 | 2026-10-13 | Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. |
CVE-2026-105715 | High | 7.5 | 2026-10-13 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-102856 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
CVE-2026-54697 | | | 2026-10-13 | ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER… |
CVE-2026-95121 | High | 7.8 | 2026-10-13 | An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can c… |
CVE-2026-77093 | | | 2026-10-13 | CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installat… |
CVE-2026-109938 | Medium | 6.5 | 2026-10-13 | Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connec… |
CVE-2025-58771 | | | 2026-10-13 | AMI APTIOV contains vulnerabilities in BIOS
where users may cause “Integer Overflow or Wraparound” by local access. Successful exploitation of this vulnerabili… |
CVE-2026-109730 | High | 8.8 | 2026-10-13 | Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbir… |
CVE-2026-109723 | Medium | 5.4 | 2026-10-13 | Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153… |
CVE-2026-97229 | Critical | 10.0 | 2026-10-13 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain c… |
CVE-2026-35001 | High | 7.0 | 2026-10-13 | OpenS100 through commit 2b1dafc contains an integer overflow vulnerability in the S-102 Bathymetric Surface parser. An attacker can supply a crafted S-102 HDF5… |
CVE-2026-109448 | Medium | 5.9 | 2026-10-12 | Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement… |
CVE-2026-103635 | | | 2026-10-10 | Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ (repo: datasketches-cpp).
compact_theta_sketch::deserialize() and wr… |
CVE-2026-107820 | Medium | 5.3 | 2026-10-09 | x64dbg-MCP Server is a native Model Context Protocol (MCP) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Prior to 1.2, src/core/m… |
CVE-2026-19569 | High | 8.8 | 2026-10-09 | dynamic_object_create() in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj_size_get(otype) + size… |
CVE-2026-107730 | Medium | 5.5 | 2026-10-08 | SumatraPDF is a multi-format reader for Windows. In 3.7.0.22298, LitParseHeader() in src/LitDoc.cpp computes the attacker-controlled hdrLen + nPieces * 16 sect… |
CVE-2026-107324 | Medium | 5.9 | 2026-10-08 | An integer overflow in BSON value-length handling in the MongoDB Go Driver can cause a runtime panic when an application validates or accesses a malformed BSON… |
CVE-2026-107446 | Medium | 6.8 | 2026-10-08 | containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an… |
CVE-2026-107224 | Medium | 6.5 | 2026-10-07 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set i… |
CVE-2026-107217 | High | 7.5 | 2026-10-07 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and from 1.1.0 to 1… |
CVE-2026-106574 | Medium | 5.3 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31, a client connected to the distributed pixel c… |
CVE-2026-106571 | Medium | 5.1 | 2026-10-07 | ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 6.9.13-56 and 7.1.2-31, a crafted local call to the Get… |
CVE-2026-59346 | Critical | 9.3 | 2026-10-07 | VMware Workstation and Fusion contain an integer-overflow vulnerability. A malicious actor with local administrative privileges on a virtual machine with VMXNE… |
CVE-2026-106417 | Critical | 9.6 | 2026-10-06 | Integer overflow in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra… |
CVE-2026-106332 | Medium | 4.3 | 2026-10-06 | Integer overflow in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromiu… |
CVE-2026-106239 | Critical | 9.6 | 2026-10-06 | Integer overflow in WebGL in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the san… |
CVE-2026-105839 | High | 7.8 | 2026-10-06 | libmikmod before 3.3.14 contains an integer overflow in the Oktalyzer loader OKT_doPBOD() that allows attackers to cause heap buffer overflow via crafted track… |
CVE-2026-105837 | High | 7.8 | 2026-10-06 | libmikmod before 3.3.14 contains an integer overflow vulnerability in DSM_Load() in load_dsm.c that allows attackers to trigger heap buffer overflow via crafte… |
CVE-2026-75820 | | | 2026-10-06 | GNU Aspell contains an integer truncation vulnerability in the WritableDict::add() function in modules/speller/default/writable.cpp. When loading a personal wo… |
CVE-2026-49885 | High | 7.8 | 2026-10-05 | In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with n… |
CVE-2026-20533 | Medium | 6.7 | 2026-10-05 | In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has a… |
CVE-2026-79113 | | | 2026-10-03 | OpenAPV before 1.1.1.0 has a read_bitstream heap-based buffer overflow. |
CVE-2026-103629 | Medium | 4.3 | 2026-10-02 | Integer overflow in Skia in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit… |
CVE-2026-103621 | Medium | 4.3 | 2026-10-02 | Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium… |
CVE-2026-83632 | | | 2026-10-02 | Allocation of resources without limits or throttling, Integer overflow or wraparound, Heap-based buffer overflow vulnerability in Apache Thrift.
This issue… |
CVE-2026-66837 | | | 2026-10-02 | Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings.
This issue affects Apache Thrift: before 0.25.0.
… |
CVE-2026-93546 | High | 8.8 | 2026-10-01 | Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persi… |
CVE-2026-102504 | High | 7.5 | 2026-10-01 | Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachannels value in i_readraw_wiol.
Nothing range-checks… |