PT-2026-112604

Name of the Vulnerable Software and Affected Versions Windows Bluetooth A2DP driver affected versions not specified Description An integer underflow wrap or wraparound occurs in the Bluetooth A2DP driver. This allows an authorized attacker to elevate privileges over an adjacent network, potential...

CVE-2026-107614

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

PT-2026-111422

Name of the Vulnerable Software and Affected Versions clevis affected versions not specified Description A flaw exists in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AF UNIX client connects to the data socket without a bound address. This occurs due to an...

PT-2026-113547

An integer underflow in OpenVPN version 2.7 alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options...

CVE-2026-85806: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

Ubuntu 24.04 LTS / 26.04 LTS : libheif vulnerabilities (USN-8649-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8649-1 advisory. It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker coul...

Microsoft Office: CVE-2026-97739: Microsoft Office Excel Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-97746: Microsoft Office Excel Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-83869: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85806: Network Policy Server (NPS) Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96925: Windows NTFS Information Disclosure Vulnerability

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83869: Windows Domain Name Service Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-96925: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-109976: Out-of-bounds Write

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

EulerOS 2.0 SP13 : graphite2 (EulerOS-SA-2026-4051)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP11 : graphite2 (EulerOS-SA-2026-4324)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP11 : graphite2 (EulerOS-SA-2026-4233)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

EulerOS 2.0 SP13 : graphite2 (EulerOS-SA-2026-4142)

According to the versions of the graphite2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an...

Exploit for CVE-2026-84411

CVE-2026-84411 — MikroTik RouterOS WebFig Integer Underflow Ex...

CVE-2013-10076: Integer Underflow (Wrap or Wraparound)

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call avextend av, len-1 . On an empty list, this undeflows, and avextend will allocate an array with 2^32 slots, leading to memory exhaustion...