CVE-2026-78512

Microsoft Office Word is affected by a numeric truncation error that allows an unauthorized attacker to achieve remote code execution over a network. Exploitation requires user interaction (e.g., opening a crafted document) but no prior privileges. The CVSS 3.1 score is 8.8 (HIGH) with full impac...

CVE-2026-69535

A numeric truncation error in the Windows Spaceport.sys driver allows an authorized local attacker with low privileges to escalate privileges, leading to full compromise of confidentiality, integrity, and availability. The vulnerability is rated CVSS 3.1 7.8 (High) with a local attack vector, low...

EUVD-2026-73536

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

EUVD-2026-73521

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69578

CVE-2026-69578 is a numeric truncation error in the Windows Kernel that allows an authorized attacker with low privileges to elevate privileges locally . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high attack complexit...

EUVD-2026-73496

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

CVE-2026-68895

CVE-2026-68895 is a numeric truncation error in Internet Storage Name Service (iSNS) that allows an authorized, local attacker to disclose information. The flaw yields a CVSS 3.1 score of 5.5 (Medium) with high confidentiality impact but no integrity or availability impact, requiring low privileg...

EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

EUVD-2026-73065

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-69822

CVE-2026-69822 is a local privilege escalation vulnerability in Windows Kerberos caused by a numeric truncation error . An authorized attacker with low privileges can exploit this to achieve full confidentiality, integrity, and availability impact (CVSS 3.1: 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/...

Microsoft JScript Remote Code Execution Vulnerability

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

Windows Kerberos Elevation of Privilege Vulnerability

Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Windows Kernel Elevation of Privilege Vulnerability

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Windows Spaceport.sys Elevation of Privilege Vulnerability

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

PT-2026-88629

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-86315

A flaw was found in Samsung Open Source Escargot. This out-of-bounds write vulnerability, caused by numeric truncation, allows an attacker to corrupt native memory. By supplying specially crafted JavaScript for execution, a remote attacker can trigger this flaw, leading to the host process crashi...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86315

Samsung Open Source Escargot (a JavaScript engine) on Linux x86-64 is affected by an out-of-bounds write caused by numeric truncation. A crafted class definition whose instance initialization entry count exceeds UINT16_MAX allows an attacker who can supply JavaScript for execution to corrupt nati...