CWE-190
3,802 CVEs • Abstraction: Base • Likelihood of Exploit: Medium
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
CVEs (3,802)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 15, 2026 Oct 13, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 15, 2026 Oct 13, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. |
Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 26, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally. |
1Microsoft 9Windows 10 21h2 Windows 10 22h2Windows 11 23h2+6 moreOct 26, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally. |
Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally. |
1Microsoft 7Windows 11 23h2 Windows 11 24h2Windows 11 25h2+4 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreOct 23, 2026 Oct 13, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreOct 23, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than...Show more |
A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service (DoS) by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An...Show more |
Integer overflow or wraparound in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network. |
1Microsoft 4365 Apps Microsoft 365Office 2021+1 moreOct 15, 2026 Oct 13, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 15, 2026 Oct 13, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network. |
ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerReader.readLength() accepts excessive long-form DER length octets, accumulates them into an Int, and primitive r...Show more |