CVE-2026-77488

Microsoft SQL Server is affected by an integer underflow (wrap or wraparound) that allows an authorized local attacker to disclose information. The flaw requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) — high confidentiality impact but no integrity or availab...

EUVD-2026-73789

Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...

CVE-2026-71352

CVE-2026-71352 is an integer underflow (wrap or wraparound) in Windows Remote Access Connection Manager that allows an authorized attacker to achieve remote code execution over a network. The vulnerability requires low privileges and no user interaction, with a CVSS 3.1 base score of 8.8 (HIGH) r...

EUVD-2026-73660

Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...

EUVD-2026-73622

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...

CVE-2026-69824

CVE-2026-69824 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an unauthorized attacker to achieve remote code execution over a network with no privileges required and no user interaction. The CVSS v3.1 score is 9.8 (Critical) with a vector of AV:N...

EUVD-2026-73576

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69687

CVE-2026-69687 is an integer underflow (wrap or wraparound) vulnerability in the Windows USB Audio Class driver (usbaudio.sys). An authorized local attacker can exploit this flaw to elevate privileges , achieving high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH ; ve...

EUVD-2026-73489

Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69421

CVE-2026-69421 is an integer underflow (wrap/wraparound) vulnerability in a Windows Kernel Mode Driver . An authorized local attacker can exploit the flaw to elevate privileges , with full impact to confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/...

EUVD-2026-73427

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

CVE-2026-69269

CVE-2026-69269 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an authorized attacker with local access and low privileges to achieve local privilege escalation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH )....

EUVD-2026-73399

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

CVE-2026-68827

CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...

CVE-2026-72947

CVE-2026-72947 is an integer underflow (wrap/wraparound) in the Windows File History Service that allows an authorized attacker to achieve local privilege escalation . Microsoft rates it 6.4 MEDIUM (CVSS 3.1, high privileges required), while NVD assigns 7.0 HIGH (low privileges required). CISA's ...

EUVD-2026-73343

Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69276

CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...

EUVD-2026-73213

Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...

Skype for Business and Lync Denial of Service Vulnerability

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

Microsoft Windows SCSI Class System File Information Disclosure Vulnerability

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...