CVE-2026-80213 | Medium | 4.0 | 2026-08-27 | An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking it… |
CVE-2026-77014 | Medium | 5.3 | 2026-08-20 | A flaw was found in libsoup's SoupServer HTTP Range header processing. The sort_ranges() comparator in soup-message-headers.c truncates a 64-bit subtraction re… |
CVE-2026-65610 | | | 2026-08-19 | nnn stores homelen variable as uchar_t, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment ca… |
CVE-2026-73523 | High | 7.5 | 2026-08-17 | COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN… |
CVE-2026-49263 | | | 2026-08-14 | Capstone is a disassembly framework. Prior to version 6.0.0-Alpha9, Capstone's WebAssembly backend accepts attacker-controlled raw WASM instruction bytes throu… |
CVE-2026-68804 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-65798 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65797 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-65795 | Medium | 6.7 | 2026-08-11 | Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-63525 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-62883 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62881 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62769 | Medium | 6.7 | 2026-08-11 | Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. |
CVE-2026-62739 | High | 7.8 | 2026-08-11 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-62698 | High | 7.8 | 2026-08-11 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. |
CVE-2026-56650 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-55142 | Medium | 5.5 | 2026-07-14 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2026-50357 | High | 7.8 | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-50332 | High | 7.8 | 2026-07-14 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-49792 | High | 7.8 | 2026-07-14 | Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally. |
CVE-2026-6679 | High | 7.5 | 2026-06-25 | A heap buffer overflow could occur in the DTLS 1.3 ACK serialization path before the connecting peer is authenticated. The buffer overflow was due to an intege… |
CVE-2026-6039 | | | 2026-06-15 | LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a DXF polyline. The point count taken fro… |
CVE-2026-44823 | High | 7.8 | 2026-06-09 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-40409 | High | 7.8 | 2026-06-09 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-40404 | High | 7.8 | 2026-06-09 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability |
CVE-2026-42944 | High | 7.5 | 2026-05-20 | NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie ED… |
CVE-2026-40380 | Medium | 6.2 | 2026-05-12 | Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack. |
CVE-2026-44927 | Low | 2.9 | 2026-05-08 | In uriparser before 1.0.2, there is pointer difference truncation to int in various places. |
CVE-2026-42371 | Medium | 5.1 | 2026-04-27 | uriparser before 1.0.1 has numeric truncation in text range comparison, if an application accepts URIs with a length in gigabytes. |
CVE-2026-32240 | Medium | 6.5 | 2026-03-12 | Cap'n Proto is a data interchange format and capability-based RPC system. Prior to 1.4.0, when using Transfer-Encoding: chunked, if a chunk's size parsed to a… |
CVE-2025-10543 | Medium | 5.3 | 2025-12-02 | In Eclipse Paho Go MQTT v3.1 library (paho.mqtt.golang) versions <=1.5.0 UTF-8 encoded strings, passed into the library, may be incorrectly encoded if their le… |
CVE-2025-53723 | High | 7.8 | 2025-08-12 | Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2025-6965 | High | 7.7 | 2025-07-15 | There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead… |
CVE-2025-49679 | High | 7.8 | 2025-07-08 | Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally. |
CVE-2024-49018 | High | 8.8 | 2024-11-12 | SQL Server Native Client Remote Code Execution Vulnerability |
CVE-2024-43639 | Critical | 9.8 | 2024-11-12 | Windows KDC Proxy Remote Code Execution Vulnerability |
CVE-2024-43519 | High | 8.8 | 2024-10-08 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-37337 | High | 7.1 | 2024-09-10 | Microsoft SQL Server Native Scoring Information Disclosure Vulnerability |
CVE-2024-38125 | High | 7.8 | 2024-08-13 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability |
CVE-2024-38086 | Medium | 6.4 | 2024-07-09 | Azure Kinect SDK Remote Code Execution Vulnerability |
CVE-2024-38044 | High | 7.2 | 2024-07-09 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2024-30029 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30024 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30023 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30022 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30015 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30014 | High | 7.5 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2024-30009 | High | 8.8 | 2024-05-14 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2023-32143 | High | 8.8 | 2024-05-03 | D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… |
CVE-2024-29050 | High | 8.4 | 2024-04-09 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2024-28944 | High | 8.8 | 2024-04-09 | Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21451 | High | 8.8 | 2024-03-12 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21440 | High | 8.8 | 2024-03-12 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21434 | High | 7.8 | 2024-03-12 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability |
CVE-2024-21429 | Medium | 6.8 | 2024-03-12 | Windows USB Hub Driver Remote Code Execution Vulnerability |
CVE-2024-21391 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21377 | Medium | 5.5 | 2024-02-13 | Windows DNS Information Disclosure Vulnerability |
CVE-2024-21352 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21310 | High | 7.8 | 2024-01-09 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-36641 | Medium | 6.5 | 2023-11-14 | A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy… |
CVE-2023-36710 | High | 7.8 | 2023-10-10 | Windows Media Foundation Core Remote Code Execution Vulnerability |
CVE-2023-35328 | High | 7.8 | 2023-07-11 | Windows Transaction Manager Elevation of Privilege Vulnerability |
CVE-2022-42475 | Critical | 9.8 | 2023-01-02 | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6… |
CVE-2022-34680 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an integer truncation can lead to an out-of-bounds read, w… |
CVE-2022-34676 | High | 7.1 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read may lead to denial of service, infor… |
CVE-2022-34670 | High | 7.8 | 2022-12-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors w… |
CVE-2020-15202 | Critical | 9.0 | 2020-09-25 | In Tensorflow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, the `Shard` API in TensorFlow expects the last argument to be a function taking two `int64… |