182 matches found
CVE-2026-84970
A numeric truncation weakness exists in the JSON parsing component of the MongoDB C++ Driver's BSON library. An actor who controls the text that an embedding application hands to the library's public JSON parsing interface, when that text is very large, can cause the library to read memory beyond...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a heap overflow in NLnet Labs Unbound [CVE-2026-42944]
Summary IBM Watson Speech Services Cartridge is vulnerable to a heap overflow in NLnet Labs Unbound, due to an issue that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/or EDNS Padding options in the reply packet CVE-2026-42944. NLnet Labs Unbound is used as part ...
CVE-2026-65610
A flaw was found in nnn. This vulnerability arises from a numeric truncation error where the system incorrectly handles HOME path lengths exceeding 255 characters. An attacker, by manipulating the victim's execution environment, can provide a specially crafted HOME path. This manipulation causes...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
Numeric Truncation Error
Overview Affected versions of this package are vulnerable to Numeric Truncation Error in readbrtable in arch/WASM/WASMDisassembler.c. An attacker can cause no-progress disassembly or parser desynchronization by supplying a large, well-formed brtable instruction through csdisasm or csdisasmiter. T...
CVE-2026-68804
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-65798
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-65797
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-63525
Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-62883
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62881
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62769
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...
CVE-2026-62698
Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally...
EUVD-2026-56758
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-68804
Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
EUVD-2026-56743
Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally...