CWE-190
CVEs classified under CWE-190, newest first.
702 CVEsRSS
CVE-2026-83918High· 7.8Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-83877High· 7.8Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
CVE-2026-83847High· 7.8Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVE-2026-83828High· 7.8Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-83725High· 8.8Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
CVE-2026-83688High· 8.8Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-83578Critical· 9.8Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
CVE-2026-83573Medium· 6.8Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-70269High· 8.1Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70258High· 8.8Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-70257High· 8.8Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70149High· 8.8Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.
CVE-2026-70113High· 7.8Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70052High· 7.8Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally.
CVE-2026-70008High· 7.8Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69966High· 7.8Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69963High· 7.8Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69957High· 7.8Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
CVE-2026-69934High· 7.8Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-69916High· 7.8Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-69521High· 8.8Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network.
CVE-2026-69354High· 7.8Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-110036Low· 3.3PoCA flaw was found in device-mapper-persistent-data
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error…
CVE-2026-108400High· 8.8Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network.
CVE-2026-105715High· 7.5Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-102856High· 8.8Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network.
CVE-2026-54697Medium· 6.7ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive readers allocate a…
CVE-2026-95121High· 7.8PoCAn issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp
An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in src/atom_rtp.cpp. A specially crafted MP4 file can cause an undersized rtp atom to produce a near-2^64 allocation size through an …
CVE-2026-77093High· 7.1CvFWD contained an integer overflow affecting service availability
CvFWD contained an integer overflow affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and…
CVE-2026-109938Medium· 6.5PoCPositive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled.
Positive mapped-video coordinates overflow and abort FreeRDP clients A malicious or compromised RDP server can terminate a FreeRDP client after the user connects with video redirection enabled.