CVE-2026-83877

An integer overflow or wraparound vulnerability exists in the HID Parser Library , affecting Windows Devices . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.8 , the provided documents do not speci...

CVE-2026-83573

An integer overflow or wraparound vulnerability exists in a Windows Kernel Mode Driver . This flaw allows an unauthorized attacker to elevate privileges by performing a physical attack . The vulnerability is characterized by a MEDIUM base severity score (6.8) and involves a PHYSICAL attack vector...

CVE-2026-97778

A vulnerability exists in Microsoft Office Excel caused by an integer overflow or wraparound . This flaw allows an unauthorized attacker to achieve remote code execution over a network. While the technical root cause is an integer overflow, the specific component or file is not identified in the ...

EUVD-2026-99794

Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...

CVE-2026-96943

A vulnerability exists in the Windows Raw Image Extension due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with CWE-190 (Integer Overflow or Wraparound) and CWE-122 (Heap-...

CVE-2026-70113

The Windows Client for NFS is vulnerable to an integer overflow or wraparound condition. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via Microsoft security updates.

CVE-2026-70008

An integer overflow or wraparound vulnerability exists in the Windows IP Over USB Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS v3.1 base score of 7.8 (High) . No specific exploit code or in-the-wild exploitati...

CVE-2026-88074

An integer overflow or wraparound vulnerability exists within the Windows Virtualization-Based Security (VBS) Enclave . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or patch versions are provided in the documents, but the official M...

CVE-2026-69934

A vulnerability in Windows Spaceport.sys involves an integer overflow or wraparound (CWE-190) combined with improper input validation (CWE-20). This flaw enables an authorized attacker to achieve local privilege escalation . The impact is categorized as high for confidentiality, integrity, and av...

CVE-2026-69916

A vulnerability in Windows NTFS caused by an integer overflow or wraparound allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause details, or remediation steps are provided in the documents. Exploitation details are not provided.

CVE-2026-70052

An integer overflow or wraparound vulnerability exists in Windows PowerShell . This flaw allows an authorized attacker to achieve local code execution . While the technical root cause is identified as an integer overflow or wraparound, specific affected versions or files are not detailed in the p...

CVE-2026-85807

An integer overflow or wraparound vulnerability exists in the Windows USB Video Driver . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploit links are provided in the documents. Remediation information is indicated as an official ...

CVE-2026-69521

A Remote Code Execution (RCE) vulnerability exists in Windows iSCSI due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to execute code over a network. The vulnerability is confirmed with a High base severity score of 8.8 . No specific exploit details or ...

CVE-2026-69966

An integer overflow or wraparound vulnerability exists in the Microsoft Streaming Service (specifically identified as the Kernel Streaming Service Driver ). This flaw allows an authorized attacker to achieve local privilege escalation . A formal official fix is available, and the vulnerability is...

CVE-2026-69957

A vulnerability in the Windows Overlay Filter component allows an authorized attacker to achieve local privilege escalation . The root cause is identified as an integer overflow or wraparound condition (CWE-190) and a buffer over-read (CWE-126). Impacting the system's confidentiality, integrity, ...

CVE-2026-105715

A vulnerability in Microsoft Office Word involves an integer overflow or wraparound , which could allow an unauthorized attacker to achieve remote code execution over a network. The impact of this vulnerability includes potential arbitrary code execution within the victim's context. Microsoft has...

CVE-2026-108400

A vulnerability in the Microsoft Windows Codecs Library involving an integer overflow or wraparound allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. Specifically, this affects the HEVC Video Extensions component. The vulnerability carries a HIGH base severity...

CVE-2026-110247 Integer overflow in libmime buffer growth could lead to heap corruption

Several buffer-growth sites in libmime performed size arithmetic in 32-bit types without overflow checks. On a sufficiently large message the growth guard could fail open, or the buffer could be reallocated smaller than required, and a subsequent memcpy would then write attacker-controlled data...

CVE-2026-109964

A flaw was found in ImageMagick. A remote attacker can exploit this vulnerability to achieve arbitrary code execution or trigger an application crash, resulting in a denial of service DoS. By providing a specially crafted PICT image file with manipulated dimension values, an integer overflow occu...

Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2024-53161 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: EDAC/bluefield: Fix potential integer overflow The 64-bit argument for the "get DIMM...