7309 matches found
EUVD-2026-73427
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
CVE-2026-69269
CVE-2026-69269 is an integer underflow (wrap or wraparound) vulnerability in Microsoft Standard XPS that allows an authorized attacker with local access and low privileges to achieve local privilege escalation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 7.8 HIGH )....
CVE-2026-68827
CVE-2026-68827 is an integer underflow (wrap or wraparound) vulnerability in Windows GDI+ that allows an authorized attacker to achieve elevation of privileges over a network . The vulnerability is rated HIGH severity (CVSS 8.0) with a vector of AV:N/AC:L/PR:L/UI:R, meaning exploitation requires ...
EUVD-2026-73399
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
CVE-2026-72947
CVE-2026-72947 is an integer underflow (wrap/wraparound) in the Windows File History Service that allows an authorized attacker to achieve local privilege escalation . Microsoft rates it 6.4 MEDIUM (CVSS 3.1, high privileges required), while NVD assigns 7.0 HIGH (low privileges required). CISA's ...
EUVD-2026-73343
Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73213
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
CVE-2026-69276
CVE-2026-69276 is an integer underflow (wrap or wraparound) in the Microsoft UxTheme Library (uxtheme.dll) that allows an unauthorized attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) , reflecting network-based attack vector with no privileges or us...
Windows Remote Access Connection Manager Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...
Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
Microsoft Standard XPS Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...
Microsoft SQL Server Information Disclosure Vulnerability
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...
Microsoft UxTheme Library (uxtheme.dll) Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
Microsoft Standard XPS Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
Windows File History Service Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...
Windows GDI+ Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
Microsoft Windows SCSI Class System File Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...
kernel: nvmet-rdma: handle inline data with a nonzero offset
A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...