1234 matches found
CVE-2025-53723
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-53723
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2025-53733
CVE-2025-53733 affects Microsoft Word (Office). The issue is caused by incorrect conversion between numeric types in Word, enabling a local attacker to execute arbitrary code when a specially crafted document is opened or when Preview Pane is used, per vendor descriptions and multiple security pa...
CVE-2025-53723
CVE-2025-53723 : Numeric truncation error in Windows Hyper-V allows an authorized, local attacker to elevate privileges. The entry is confirmed to affect the Windows Hyper-V component, with impact described as local privilege escalation and high confidentiality/integrity/availability effects in t...
Microsoft Word Remote Code Execution Vulnerability
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Windows Hyper-V Elevation of Privilege Vulnerability
Numeric truncation error in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
PT-2025-32828 · Microsoft · Windows Hyper-V +1
Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A numeric truncation error exists in Windows Hyper-V that may allow an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information abo...
PT-2025-32838
Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: An incorrect conversion between numeric types in Microsoft Office Word can allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...
Linux Distros Unpatched Vulnerability : CVE-2024-1552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.Note: This issue only affects 32-bit ARM devices. Th...
rexml: REXML ReDoS vulnerability
A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...
rexml: REXML ReDoS vulnerability
A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...
RISC Zero Ethereum 数字错误漏洞
RISC Zero Ethereum is a computing platform open-sourced by RISC Zero. A numeric error vulnerability exists in RISC Zero Ethereum versions 2.1.0 and earlier and risc0-circuit-rv32im versions 2.0.4 and earlier, which stems from a signed integer division issue that could result in invalid output...
CVE-2025-54801 Fiber Susceptible to Crash via `BodyParser` Due to Unvalidated Large Slice Index in Decoder
Fiber is an Express inspired web framework written in Go. In versions 2.52.8 and below, when using Fiber's Ctx.BodyParser to parse form data containing a large numeric key that represents a slice index e.g., test.18446744073704, the application crashes due to an out-of-bounds slice allocation in...
rexml: REXML ReDoS vulnerability
A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...
Adobe InCopy Number Error Vulnerability
Adobe InCopy is a text editing software for creative writing from the American company Audobee Adobe. A numeric error vulnerability exists in Adobe InCopy, which can be exploited by an attacker to cause arbitrary code to be executed...
Adobe Framemaker Numeric Error Vulnerability (CNVD-2025-16398)
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A numeric error vulnerability exists in Adobe Framemaker, which can be exploited by an attacker to execute arbitra...
Adobe Illustrator Numeric Error Vulnerability (CNVD-2025-16549)
Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A numeric error vulnerability exists in Adobe Illustrator that originates from an integer underflow and can be exploited by an attacker to cause arbitrary code to be executed...
Microsoft Windows Numeric Error Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability. The vulnerability can be exploited by an attacker to gain elevated privileges...
Numeric Truncation Error
Overview Affected versions of this package are vulnerable to Numeric Truncation Error in the aggregation process. An attacker can cause data corruption, unauthorized data modification, or application crashes by submitting specially crafted input that leads to the number of aggregate terms exceedi...
rexml: REXML ReDoS vulnerability
A flaw was found in the ReXML XML toolkit for Ruby. Parsing XML data containing a large number of digits between & and x...; in a hex numeric character reference &x...; can trigger a regular expression denial of service ReDoS condition, leading to a denial of service...