← Back
CWE-191

493 CVEs • Abstraction: Base

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

JSON object

Loading...

CVEs (493)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-28250
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
Apr 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-28247
1Microsoft
4Windows Server 2012
Windows Server 2016Windows Server 2019+1 more
Jun 17, 2026
Apr 11, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Network File System Information Disclosure Vulnerability
CVE-2023-24887
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
Apr 11, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2023-24911
1Microsoft
11Windows 10 1607
Windows 10 1809Windows 10 20h2+8 more
Jun 17, 2026
Mar 14, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2023-24864
1Microsoft
12Windows 10 1507
Windows 10 1607Windows 10 1809+9 more
Jun 17, 2026
Mar 14, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
CVE-2023-21708
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
Mar 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2023-20635
1Google
1Android
Jun 17, 2026
Mar 7, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitati...Show more
In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07563028; Issue ID: ALPS07563028.Show less
CVE-2023-21815
1Microsoft
3Visual Studio 2017
Visual Studio 2019Visual Studio 2022
Jun 17, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Visual Studio Remote Code Execution Vulnerability
CVE-2023-21718
1Microsoft
1Sql Server
Jun 17, 2026
Feb 14, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVE-2023-21684
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
Feb 14, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
CVE-2022-38681
1Google
1Android
Jun 17, 2026
Feb 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.
CVE-2023-0469
1Linux
1Linux Kernel
Jun 17, 2026
Jan 26, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
A use-after-free flaw was found in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent in the Linux Kernel during call cleanup. This flaw may lead to a denial of service.
CVE-2023-21681
1Microsoft
15Windows 10 1607
Windows 10 1809Windows 10 20h2+12 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-21556
1Microsoft
15Windows 10 1607
Windows 10 1809Windows 10 20h2+12 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
8.1 HIGH· v3
N/A· v2
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
CVE-2023-21527
1Microsoft
15Windows 10 1607
Windows 10 1809Windows 10 20h2+12 more
Jun 17, 2026
Jan 10, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows iSCSI Service Denial of Service Vulnerability
CVE-2022-4338
2Debian
Openvswitch
2Debian Linux
Openvswitch
Jun 17, 2026
Jan 10, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An integer underflow in Organization Specific TLV was found in various versions of OpenvSwitch.
CVE-2022-44444
1Google
1Android
Jun 17, 2026
Jan 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services.
CVE-2022-20516
1Google
1Android
Jun 17, 2026
Dec 16, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User i...Show more
In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-224002331Show less
CVE-2022-20483
1Google
1Android
Jun 17, 2026
Dec 13, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional exe...Show more
In several functions that parse avrc response in avrc_pars_ct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID: A-242459126Show less
CVE-2022-37301
1Schneider Electric
48Modicon M340 Bmx P34 2010 Firmware
Modicon M340 Bmx P34 2030 FirmwareModicon M580 Bmeh582040 Firmware+45 more
Jun 17, 2026
Nov 22, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon...Show more
A CWE-191: Integer Underflow (Wrap or Wraparound) vulnerability exists that could cause a denial of service of the controller due to memory access violations when using the Modbus TCP protocol. Affected products: Modicon M340 CPU (part numbers BMXP34*)(V3.40 and prior), Modicon M580 CPU (part numbers BMEP* and BMEH*)(V3.22 and prior), Legacy Modicon Quantum/Premium(All Versions), Modicon Momentum MDI (171CBU*)(All Versions), Modicon MC80 (BMKC80)(V1.7 and prior)Show less