CWE-190 · Integer Overflow or Wraparound (page 2)
Page 2 of 36 — CVEs classified under CWE-190, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-72986 | High | 8.8 | 2026-09-08 | Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network. |
CVE-2026-71336 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network. |
CVE-2026-70581 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70572 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-70351 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. |
CVE-2026-69846 | High | 8.2 | 2026-09-08 | Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-69742 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. |
CVE-2026-69738 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69734 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-69707 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69631 | High | 7.5 | 2026-09-08 | Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network. |
CVE-2026-69608 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
CVE-2026-69594 | High | 7.8 | 2026-09-08 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
CVE-2026-69586 | Critical | 9.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
CVE-2026-69584 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69499 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
CVE-2026-69469 | Medium | 6.6 | 2026-09-08 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-69408 | Critical | 9.8 | 2026-09-08 | Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
CVE-2026-69407 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69373 | Medium | 6.7 | 2026-09-08 | Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
CVE-2026-69329 | High | 7.5 | 2026-09-08 | Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. |
CVE-2026-69298 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-69266 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-68889 | High | 7.1 | 2026-09-08 | Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network. |
CVE-2026-68832 | High | 7.8 | 2026-09-08 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-67641 | Medium | 6.5 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to deny service over a network. |
CVE-2026-67384 | High | 8.8 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-67376 | High | 7.5 | 2026-09-08 | Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-82076 | Medium | 6.5 | 2026-09-08 | An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to byp… |
CVE-2026-86289 | Medium | 4.3 | 2026-09-07 | A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. P… |
CVE-2026-84732 | | 2026-09-07 | Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs tha… | |
CVE-2026-86314 | Medium | 6.2 | 2026-09-07 | Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an… |
CVE-2026-86139 | Medium | 6.9 | 2026-09-05 | In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow. |
CVE-2026-86138 | Medium | 6.9 | 2026-09-05 | In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow. |
CVE-2026-18078 | Medium | 4.3 | 2026-09-04 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to an integer overflow. |
CVE-2026-81666 | Medium | 6.5 | 2026-09-04 | An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-… |
CVE-2026-85438 | Critical | 9.8 | 2026-09-03 | MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPFunction() where dimension, piece, and degree counts from encoded BHV_IPF payloa… |
CVE-2026-84965 | Medium | 5.1 | 2026-09-03 | An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operat… |
CVE-2026-48486 | High | 7.5 | 2026-09-03 | Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment (PoC+) consensus algorithm. Prior to version 3.9.9, an integer… |
CVE-2026-75538 | | 2026-09-01 | An attacker that connects to an open Erlang TCP port that uses the inet driver with {packet,4} mode can use a signed overflow in an incorrect packet length cal… | |
CVE-2026-9621 | | 2026-09-01 | A denial-of-service security issue exists within RSLinx® Classic. The security issue stems from improper handling of a malformed packet. A crafted CIP packet c… | |
CVE-2026-84141 | Critical | 9.8 | 2026-09-01 | Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2. |
CVE-2026-82737 | | 2026-09-01 | Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector wit… | |
CVE-2026-82908 | High | 8.8 | 2026-08-31 | A vulnerability was found in MSI Dragon Center up to 2.0.155.0. Affected by this vulnerability is the function MmioWritePath in the library NTIOLib_X64.sys of… |
CVE-2026-55764 | | 2026-08-28 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, Klever-Go allows a mint-role holder to bypass a finite per-nonce MaxSupp… | |
CVE-2026-54755 | Critical | 9.6 | 2026-08-28 | Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can… |
CVE-2026-19313 | | 2026-08-28 | An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending special… | |
CVE-2026-38350 | High | 7.5 | 2026-08-28 | An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS… |
CVE-2026-38349 | High | 7.5 | 2026-08-28 | An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2026-38348 | High | 7.5 | 2026-08-28 | An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a craf… |
CVE-2026-38346 | High | 7.5 | 2026-08-28 | An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) v… |
CVE-2026-38343 | Medium | 6.5 | 2026-08-28 | An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) via supplying a… |
CVE-2026-37198 | High | 7.5 | 2026-08-27 | An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP packet. |
CVE-2026-30045 | High | 7.5 | 2026-08-27 | An integer overflow in the /nnrf-disc/v1/nf-instances component of open5gs v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted H… |
CVE-2026-47857 | Medium | 5.9 | 2026-08-27 | In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service (DoS) condition. Rea… |
CVE-2025-70293 | Critical | 9.8 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead… |
CVE-2025-70290 | Critical | 9.8 | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk me… |
CVE-2026-79902 | Medium | 5.5 | 2026-08-26 | A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array (VLA… |
CVE-2026-76149 | Medium | 4.4 | 2026-08-26 | CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file. |
CVE-2026-79292 | High | 8.3 | 2026-08-25 | Integer overflow in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execut… |
CVE-2026-79223 | High | 8.8 | 2026-08-25 | Integer overflow in Chromium in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted file. (Chromium… |
CVE-2026-79215 | High | 8.8 | 2026-08-25 | Integer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a cra… |
CVE-2026-78950 | High | 8.8 | 2026-08-25 | Integer overflow in WebRTC in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a cra… |
CVE-2026-52491 | High | 8.4 | 2026-08-25 | An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component |
CVE-2026-59982 | High | 7.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11… |
CVE-2026-59186 | High | 7.1 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions before 3.2.11, 3.3… |
CVE-2026-18445 | Medium | 6.6 | 2026-08-25 | There is an integer overflow vulnerability resulting in an out-of-bounds write recently discovered in NI LabVIEW. This may result in information disclosure or… |
CVE-2026-59183 | Medium | 5.5 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.1.0 through 3.2.1… |
CVE-2026-55373 | Medium | 6.2 | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.1… |
CVE-2026-54920 | Unrated | | 2026-08-25 | OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.1… |
CVE-2026-52492 | High | 7.8 | 2026-08-24 | An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and s… |
CVE-2026-78465 | High | 7.0 | 2026-08-24 | A flaw was found in the file-pcx plugin in GIMP, affecting 32-bit builds only. When processing a PCX image file, the plugin calculates memory allocation sizes… |
CVE-2026-77219 | High | 7.1 | 2026-08-21 | GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a craft… |
CVE-2026-50278 | Medium | 6.5 | 2026-08-21 | iccDEV provides a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.2.1 have a `CIccEmbedIO::Read8()` size_t und… |
CVE-2026-69419 | High | 8.5 | 2026-08-20 | Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network. |
CVE-2026-18670 | High | 8.2 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service and potentially disclose sensitive information due to… |
CVE-2026-17160 | Critical | 9.8 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow during size computation. |
CVE-2026-17159 | High | 7.5 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow. |
CVE-2026-69242 | | 2026-08-20 | libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can e… | |
CVE-2026-72854 | Medium | 5.3 | 2026-08-20 | msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked… |
CVE-2026-72852 | High | 7.8 | 2026-08-20 | hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int… |
CVE-2026-63384 | | 2026-08-20 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in event_tagging.c when evtag_unmarsha… | |
CVE-2026-18309 | High | 7.8 | 2026-08-20 | GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected i… |
CVE-2026-18308 | High | 7.8 | 2026-08-20 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2026-18306 | High | 7.8 | 2026-08-20 | GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2026-18305 | High | 7.8 | 2026-08-20 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2026-18304 | High | 7.8 | 2026-08-20 | GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2026-18301 | High | 7.8 | 2026-08-20 | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2026-18300 | High | 7.8 | 2026-08-20 | GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in… |
CVE-2026-18917 | High | 7.8 | 2026-08-20 | A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows c… |
CVE-2026-68552 | Medium | 5.3 | 2026-08-19 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS… |
CVE-2026-17091 | High | 8.4 | 2026-08-19 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the… |
CVE-2026-16933 | High | 8.2 | 2026-08-19 | IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 (Power9)… |
CVE-2026-16917 | Critical | 9.8 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an integer overflow. |
CVE-2026-16890 | Low | 3.6 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an integer overf… |
CVE-2026-16852 | High | 7.5 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow. |
CVE-2026-16834 | Critical | 9.8 | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer underflow. |
CVE-2026-16724 | Medium | 4.5 | 2026-08-19 | IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerabilit… |
CVE-2026-16661 | High | 8.2 | 2026-08-19 | IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, and FW950.00 through FW950.H2 is affected by a vulnerability in the… |
CVE-2026-19321 | Medium | 6.7 | 2026-08-19 | Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in the host firmware. An attacker… |