CWE-190
CVEs classified under CWE-190, newest first.
387 CVEsRSS
CVE-2026-49927High· 7.8In multiple locations, there is a possible out of bounds write due to an integer overflow
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-49919High· 7.8In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…
CVE-2026-45527Medium· 4.3In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed…
CVE-2026-84000High· 7.8Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally.
CVE-2026-81959High· 7.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-81949High· 7.8Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-77896Medium· 6.5Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
CVE-2026-77486High· 8.8Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network.
CVE-2026-73002High· 7.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72995High· 7.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72990High· 7.8Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-72986High· 8.8Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
CVE-2026-71336High· 8.8Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network.
CVE-2026-70581High· 7.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70572High· 7.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-70351High· 8.8Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network.
CVE-2026-69846High· 8.2Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
CVE-2026-69742High· 8.8Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
CVE-2026-69738High· 7.8Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
CVE-2026-69734Medium· 6.5Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-69707High· 7.8Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-69631High· 7.5Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to deny service over a network.
CVE-2026-69608High· 7.8Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-69594High· 7.8Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
CVE-2026-69586Critical· 9.8Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network.
CVE-2026-69584High· 7.8Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-69499High· 8.8Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
CVE-2026-69469Medium· 6.6Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
Integer overflow or wraparound in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-69408Critical· 9.8Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
CVE-2026-69407High· 7.8Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.
Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.