CWE-197
Numeric Truncation Error
Description
Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.
Hierarchy (View 1000)
Parents
Children
none
CVEs mapped to this weakness (79)
page 2 of 4| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69535 | Hig | 0.51 | 7.8 | 0.00 | Sep 8, 2026 | Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-68804 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-63525 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-62739 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-62698 | Hig | 0.51 | 7.8 | 0.00 | Aug 11, 2026 | Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally. | ||
| CVE-2026-44823 | Hig | 0.51 | 7.8 | 0.00 | Jun 9, 2026 | Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-40409 | Hig | 0.51 | 7.8 | 0.00 | Jun 9, 2026 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | ||
| CVE-2026-40404 | Hig | 0.51 | 7.8 | 0.00 | Jun 9, 2026 | Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability | ||
| CVE-2025-53723 | Hig | 0.51 | 7.8 | 0.00 | Aug 12, 2025 | Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally. | ||
| CVE-2025-49679 | Hig | 0.51 | 7.8 | 0.00 | Jul 8, 2025 | Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally. | ||
| CVE-2024-38125 | Hig | 0.51 | 7.8 | 0.06 | Aug 13, 2024 | Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | ||
| CVE-2024-21434 | Hig | 0.51 | 7.8 | 0.01 | Mar 12, 2024 | Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability | ||
| CVE-2023-36710 | Hig | 0.51 | 7.8 | 0.01 | Oct 10, 2023 | Windows Media Foundation Core Remote Code Execution Vulnerability | ||
| CVE-2023-35328 | Hig | 0.51 | 7.8 | 0.00 | Jul 11, 2023 | Windows Transaction Manager Elevation of Privilege Vulnerability | ||
| CVE-2022-34670 | Hig | 0.51 | 7.8 | 0.00 | Dec 30, 2022 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to… | ||
| CVE-2026-19667 | Hig | 0.49 | 7.5 | 0.00 | Sep 16, 2026 | If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through… | ||
| CVE-2026-73523 | Hig | 0.49 | 7.5 | 0.00 | Aug 17, 2026 | COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP… | ||
| CVE-2024-30029 | Hig | 0.49 | 7.5 | 0.01 | May 14, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | ||
| CVE-2024-30024 | Hig | 0.49 | 7.5 | 0.02 | May 14, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability | ||
| CVE-2024-30023 | Hig | 0.49 | 7.5 | 0.02 | May 14, 2024 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.51cvss 7.8epss 0.00
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.00
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
- risk 0.51cvss 7.8epss 0.06
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Media Foundation Core Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Transaction Manager Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular user can cause truncation errors when casting a primitive to a primitive of smaller size causes data to be lost in the conversion, which may lead to…
- risk 0.49cvss 7.5epss 0.00
If an attacker-controlled authoritative server can produce a negative answer that is exactly 65536 bytes, then a flaw in `named` results in a negative cache entry of 0 bytes. When this entry is subsequently read, `named` aborts. This issue affects BIND 9 versions 9.11.0 through…
- risk 0.49cvss 7.5epss 0.00
COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP…
- risk 0.49cvss 7.5epss 0.01
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability