CWE-190
Integer Overflow or Wraparound
Description
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
Hierarchy (View 1000)
Related attack patterns (CAPEC)
CAPEC-92
CVEs mapped to this weakness (3,583)
page 43 of 180| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-49927 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2026-49919 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | ||
| CVE-2026-84000 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. | ||
| CVE-2026-81959 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-81949 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-73002 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72995 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72990 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70581 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-70572 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69738 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69707 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69608 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69594 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69584 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69407 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-69298 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-68832 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-72852 | Hig | 0.51 | 7.8 | 0.00 | Aug 20, 2026 | hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutional_layer.cpp, l.nweights is computed as (c / groups) * n * size * size and l.outputs… | ||
| CVE-2026-18309 | Hig | 0.51 | 7.8 | 0.00 | Aug 20, 2026 | GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a… |
- risk 0.51cvss 7.8epss 0.00
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.51cvss 7.8epss 0.00
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
hank-ai/darknet sizes a convolutional layer's weight and output heap buffers by multiplying configuration fields taken from a .cfg file in unchecked 32-bit int arithmetic. In src-lib/convolutional_layer.cpp, l.nweights is computed as (c / groups) * n * size * size and l.outputs…
- risk 0.51cvss 7.8epss 0.00
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a…