88904 matches found
CVE-2026-45527
A vulnerability exists in the convertCleanApertureToRect function of HeifCleanAperture.cpp within the Media Framework components of Android. This integer overflow (CWE-190) can be exploited to cause a remote denial of service (DoS) without requiring additional execution privileges or user interac...
EUVD-2026-74002
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-45527
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-73985
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28653
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28653
In multiple functions of rwt3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28653
A vulnerability exists in multiple functions of rw_t3t.cc , where an integer overflow can lead to an out-of-bounds write . This flaw could allow for local escalation of privilege without requiring additional execution privileges or user interaction. Technical details regarding the specific versio...
Security Bulletin: Multiple Vulnerabilities in IBM Data Product Hub
Summary Multiple vulnerabilities were addressed in IBM Data Product Hub version 5.4.0 Patch 6 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...
CVE-2026-81949
CVE-2026-81949 is a local code execution vulnerability in Microsoft Office Excel caused by an integer overflow or wraparound in Excel. An unauthorized attacker who convinces a user to open a crafted file can execute arbitrary code on the target system. The CVSS v3.1 score is 7.8 (HIGH) , reflecti...
EUVD-2026-73880
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...
expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution
A flaw was found in libexpat, a software library used for parsing XML Extensible Markup Language documents. An attacker could exploit an integer overflow vulnerability in the xmlwf utility by crafting malicious NOTATION declarations. This could lead to the disclosure of sensitive information or...
EUVD-2026-73805
Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...
CVE-2026-78453
CVE-2026-78453 is an integer underflow (wraparound) in the Microsoft Windows SCSI Class System File that allows an unauthorized, remote attacker to disclose information over a network . The vulnerability requires user interaction and demands no prior privileges , with a CVSS 3.1 base score of 6.5...
EUVD-2026-73789
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
CVE-2026-77488
Microsoft SQL Server is affected by an integer underflow (wrap or wraparound) that allows an authorized local attacker to disclose information. The flaw requires low privileges and no user interaction, with a CVSS 3.1 score of 5.5 (MEDIUM) — high confidentiality impact but no integrity or availab...
EUVD-2026-73788
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...
CVE-2026-77486
CVE-2026-77486 is a remote code execution vulnerability in Microsoft SQL Server caused by an integer overflow or wraparound , allowing an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (UI:R) but demands no prior privileges (PR:N) and has low att...
CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...
UBUNTU-CVE-2026-82076
An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...