72025 matches found
EUVD-2026-73985
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub
Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.4.0 Patch 6 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...
EUVD-2026-73880
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-81949
CVE-2026-81949 is a local code execution vulnerability in Microsoft Office Excel caused by an integer overflow or wraparound in Excel. An unauthorized attacker who convinces a user to open a crafted file can execute arbitrary code on the target system. The CVSS v3.1 score is 7.8 (HIGH) , reflecti...
CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...
expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution
A flaw was found in libexpat, a software library used for parsing XML Extensible Markup Language documents. An attacker could exploit an integer overflow vulnerability in the xmlwf utility by crafting malicious NOTATION declarations. This could lead to the disclosure of sensitive information or...
CVE-2026-77486
CVE-2026-77486 is a remote code execution vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound , allowing an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (UI:R) but demands no prior privileges (PR:N) and has low att...
EUVD-2026-73788
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...
UBUNTU-CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...
CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...
CVE-2026-73002
CVE-2026-73002 affects Windows Biometric Service , where an integer overflow or wraparound vulnerability allows a locally authenticated attacker to elevate privileges . The flaw requires low privileges , no user interaction, and low attack complexity, yet yields high impact on confidentiality, in...
EUVD-2026-73756
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69499
CVE-2026-69499 is an integer overflow or wraparound vulnerability in the Windows Imaging Component that allows an unauthorized attacker to achieve remote code execution over a network. The flaw requires user interaction (e.g., opening a crafted file), but no prior privileges are needed. The CVSS ...
EUVD-2026-73700
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
CVE-2026-69298
CVE-2026-69298 is an elevation of privilege vulnerability in the Windows Biometric Service , caused by an integer overflow or wraparound . An attacker with low-level local privileges can exploit this to gain higher system privileges, with high impact on confidentiality, integrity, and availabilit...
EUVD-2026-73687
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73653
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
CVE-2026-70581
An integer overflow or wraparound vulnerability in the Windows Biometric Service allows an authorized local attacker to elevate privileges . According to Microsoft's CVSS 3.1 scoring, the flaw rates 7.8 (HIGH) , with local attack vector, low complexity, low privileges required, no user interactio...
CVE-2026-70572
CVE-2026-70572 is an integer overflow or wraparound vulnerability in Windows Biometric Service that allows a locally authenticated attacker to elevate privileges . The root cause lies in improper handling of integer operations within the biometric service component. The vulnerability carries a CV...