7278 matches found
EUVD-2026-73343
Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...
CVE-2026-72947
CVE-2026-72947 is an integer underflow (wrap/wraparound) in the Windows File History Service that allows an authorized attacker to achieve local privilege escalation . Microsoft rates it 6.4 MEDIUM (CVSS 3.1, high privileges required), while NVD assigns 7.0 HIGH (low privileges required). CISA's ...
CVE-2026-69276
CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...
EUVD-2026-73213
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
Microsoft Standard XPS Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
Windows GDI+ Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
Windows File History Service Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...
Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
Microsoft Standard XPS Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
kernel: nvmet-rdma: handle inline data with a nonzero offset
A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...
kernel: nvmet-rdma: handle inline data with a nonzero offset
A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...
NewStart CGSL MAIN 7.02 : strongswan Vulnerability (NS-SA-2026-0099)
The remote NewStart CGSL host, running version MAIN 7.02, has strongswan packages installed that are affected by a vulnerability: - In the eap-mschapv2 plugin client-side in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integ...
KB5122882: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2026)
The remote Windows host is missing security update 5122882. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...
KB5122880: Windows 11 version 23H2 Security Update (September 2026)
The remote Windows host is missing security update 5122880. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...