CWE-190
3,519 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CVEs (3,519)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 11, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 11, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network. |
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
1Microsoft 5365 Apps Office 2019Office 2021+2 moreSep 9, 2026 Sep 8, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. |
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 7365 Apps Microsoft 365Office 2016+4 moreSep 8, 2026 Sep 8, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network. |
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. |
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network. |
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network. |
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack. |
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network. |
1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 moreSep 10, 2026 Sep 8, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |