CVE-2026-50357

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-49792

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

EUVD-2026-44212

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-49792

CVE-2026-49792 is a Windows ReFS vulnerability due to a numeric truncation error that allows an authorized, local attacker to execute code. Affected component is Windows Resilient File System (ReFS); impact is local code execution with high confidentiality, integrity, and availability impact as p...

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

Microsoft Word Information Disclosure Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

NTFS Elevation of Privilege Vulnerability

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-15043

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...

CVE-2026-50357: Numeric Truncation Error

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-49792: Numeric Truncation Error

Numeric truncation error in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

PT-2026-58340

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally, potentially enabling local privilege...

PT-2026-58585

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error occurs in Microsoft Office Word, which could allow an unauthorized attacker to disclose information locally. This issue enables attackers to obtain...

PT-2026-58381

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An incorrect conversion between numeric types in the Windows NTFS file system allows an authorized attacker with local access to elevate their privileges locally. Recommendations At the...

CVE-2026-55142: Numeric Truncation Error

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

CVE-2026-50402: Incorrect Conversion between Numeric Types

Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-58164

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally. Additionally, it is reported that remote...

openSUSE 16 Security Update : uriparser (openSUSE-SU-2026:21297-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21297-1 advisory. This update for uriparser fixes the following issues - CVE-2026-42371: numeric truncation in text range comparison when an application accepts...

CVE-2026-15551

CVE-2026-15551 : Samsung Open Source rlottie fraught with an integer overflow/ wraparound in the function gray_hline() , causing a heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size. Risk details: attacker-controlled input through a crafted animation; CVSS3...

CVE-2026-15551 Samsung rlottie: Numeric truncation in gray_hline() leads to heap-based buffer overflow when rendering a crafted Lottie animation at native canvas size

Integer overflow or wraparound vulnerability in Samsung Open Source rlottie allows Overflow Buffers. This issue affects...