← Back
CWE-197

95 CVEs • Abstraction: Base • Likelihood of Exploit: Low

Numeric Truncation Error

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

JSON object

Loading...

CVEs (95)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
3Apple
SiemensSqlite
9Ipados
Iphone OsMacos+6 more
Oct 15, 2026
Jul 15, 2025
7.2 HIGH· v4
7.7 HIGH· v3
N/A· v2
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to vers...Show more
There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.Show less
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Jul 8, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Numeric truncation error in Windows Shell allows an authorized attacker to elevate privileges locally.
1Microsoft
3Sql Server 2016
Sql Server 2017Sql Server 2019
Jun 17, 2026
Nov 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
SQL Server Native Client Remote Code Execution Vulnerability
1Microsoft
6Windows Server 2012
Windows Server 2016Windows Server 2019+3 more
Jun 17, 2026
Nov 12, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Windows KDC Proxy Remote Code Execution Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Oct 8, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
1Microsoft
5Sql 2016 Azure Connect Feature Pack
Sql Server 2016Sql Server 2017+2 more
Aug 10, 2026
Sep 10, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
1Microsoft
15Windows 10 1507
Windows 10 1607Windows 10 1809+12 more
Jun 17, 2026
Aug 13, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
1Microsoft
1Azure Kinect Software Development Kit
Jun 17, 2026
Jul 9, 2024
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Azure Kinect SDK Remote Code Execution Vulnerability
1Microsoft
5Windows Server 2012
Windows Server 2016Windows Server 2019+2 more
Jun 17, 2026
Jul 9, 2024
N/A· v4
7.2 HIGH· v3
N/A· v2
DHCP Server Service Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
May 14, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
1Dlink
2Dap 1360 Firmware
Dap 2020 Firmware
Jun 17, 2026
May 3, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360...Show more
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of requests to the /cgi-bin/webupg endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of root. . Was ZDI-CAN-18423.Show less
1Microsoft
13Windows 10 1507
Windows 10 1607Windows 10 1809+10 more
Jun 17, 2026
Apr 9, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Windows Cryptographic Services Remote Code Execution Vulnerability
1Microsoft
3Ole Db Driver For Sql Server
Sql Server 2019Sql Server 2022
Jun 17, 2026
Apr 9, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
1Microsoft
14Windows 10 1507
Windows 10 1607Windows 10 1809+11 more
Jun 17, 2026
Mar 12, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Microsoft ODBC Driver Remote Code Execution Vulnerability