CWE-191
657 CVEs • Abstraction: Base
Integer Underflow (Wrap or Wraparound)
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
CVEs (657)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Microsoft 5365 Apps Microsoft 365Office 2021+2 moreOct 15, 2026 Oct 13, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
1Microsoft 5365 Apps Microsoft 365Office 2021+2 moreOct 15, 2026 Oct 13, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Integer underflow (wrap or wraparound) in Windows NTFS allows an authorized attacker to disclose information locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 8.0 HIGH· v3 N/A· v2 Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 14, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network. |
1Microsoft 6Windows 11 23h2 Windows 11 24h2Windows 11 25h2+3 moreOct 21, 2026 Oct 13, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network. |
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network. |
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally. |
Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally. |
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network. |
Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally. |
1Microsoft 3Windows Server 2019 Windows Server 2022Windows Server 2025Oct 20, 2026 Oct 13, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Integer underflow (wrap or wraparound) in Windows Failover Cluster allows an unauthorized attacker to deny service over a network. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 20, 2026 Oct 13, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network. |
A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum s...Show more |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in...Show more |
[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] 1) XSA-437 (CVE-2023-34321) addressed issues with overflows in calculations involved in...Show more |