By weakness (CWE)

CWE-190: related vulnerabilities

CVEs classified under CWE-190. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

37 published vulnerabilities

• CVE-2026-11085HIGH 8.8

  A flaw in Google Chrome's GPU processing on Android devices allows attackers to trigger an integer overflow—a mathematical error where a number exceeds its storage limit—when rendering specially crafted web pages. This overflow can lead to out-of-bounds memory access, potentially allowing attackers to read sensitive data, modify system memory, or crash the application. The vulnerability requires user interaction (visiting a malicious page) but poses significant risk because it can be triggered remotely and affects a widely-used browser on millions of Android devices.

• CVE-2026-46198HIGH 8.8

  A flaw in the Linux kernel's batman-adv (Better Approach To Mobile Ad-hoc Networking) module allows an attacker on the network to trigger an integer overflow that leads to reading memory beyond intended bounds. The vulnerability stems from a type mismatch: a size validation uses a larger integer type (int) while the actual buffer position is stored in a smaller signed type (s16), creating a window where the validation passes but the buffer position can still exceed safe limits. An attacker with network access could exploit this to read sensitive kernel memory.

• CVE-2026-48095HIGH 8.8

  7-Zip, the widely used file compression utility, contains a critical flaw in how it handles NTFS compressed disk images. When a specially crafted image is opened—even with an innocuous file extension—the application miscalculates memory buffer sizes, leading to a situation where attackers can write massive amounts of data into a tiny allocated space. This memory corruption can overwrite the application's internal control structures, giving attackers the ability to execute arbitrary code on the affected system. Versions 26.00 and earlier are vulnerable; version 26.01 and later have been patched.

• CVE-2026-10921HIGH 8.3

  A flaw in Google Chrome's graphics processing library (Dawn) could allow an attacker to break out of the browser's security sandbox if they've already compromised the rendering engine. The vulnerability stems from an integer overflow—a situation where a number calculation wraps around and produces an incorrect value—that could be triggered by a specially crafted webpage. While the attacker would need to have already gained access to the renderer process, successfully exploiting this could grant them the same privileges as the operating system user running Chrome, potentially leading to full system compromise.

• CVE-2026-10924HIGH 8.3

  A mathematical error in Chrome's Chromecast component allows an attacker who has already compromised Chrome's rendering engine to break out of the browser sandbox and gain full system access. The attacker needs to trick a user into visiting a malicious webpage while the renderer is already compromised. This is a serious vulnerability because sandbox escape means the attacker moves from limited browser permissions to unrestricted control of the entire device.

• CVE-2026-42974HIGH 8.1

  A flaw in Windows Performance Monitor allows an attacker to crash or take control of a system by sending specially crafted network requests. The vulnerability stems from how the Performance Monitor handles very large numbers, causing it to malfunction and execute unauthorized code. An attacker does not need valid credentials or user interaction to exploit this; they only need network access to the affected system.

• CVE-2026-0095HIGH 8.0

  CVE-2026-0095 is a heap corruption flaw in Android's Bluetooth stack that allows a local attacker with limited privileges to escalate to higher system permissions. The vulnerability stems from an integer overflow in the l2c_fcr_clone_buf function, which can be manipulated to corrupt memory in the Bluetooth daemon process. Because this runs in a privileged context, successful exploitation grants elevated access without requiring additional tricks or user interaction.

• CVE-2026-10118HIGH 7.8

  Poppler, a widely-used PDF rendering library, contains a vulnerability in its Splash graphics backend that allows attackers to execute arbitrary code or crash applications by delivering specially crafted PDF files. The flaw stems from an integer overflow in the tiling pattern fill function—a feature used to render repeating graphical patterns in PDFs. When an attacker-controlled integer value overflows during this calculation, it causes the library to allocate insufficient heap memory. This undersized buffer is then written to beyond its boundaries, corrupting adjacent memory and potentially enabling code execution.

• CVE-2026-42916HIGH 7.8

  A flaw in the Windows NT OS kernel allows a person who already has local access to a system to gain elevated privileges—essentially moving from a standard user account to administrator-level control. The vulnerability stems from an integer overflow issue, where a numerical calculation exceeds its intended boundary, potentially corrupting memory or program logic in a way that a local attacker can exploit. This affects a broad range of Windows 10 and Windows 11 versions, as well as Windows Server 2012 through 2025.

• CVE-2026-44803HIGH 7.8

  An integer overflow vulnerability exists in the Windows graphics subsystem (Win32K) that could allow an attacker with local access to execute code with system privileges. The flaw resides in graphics processing routines and can be triggered through user interaction, such as opening a specially crafted document in Microsoft Office applications. While exploitation requires local system access and user action, successful exploitation grants complete control over an affected system.

• CVE-2026-44812HIGH 7.8

  A flaw in Windows graphics handling (Win32K subsystem) allows a local attacker to crash or take control of a system by exploiting how the operating system processes certain numeric values. The vulnerability requires user interaction—such as opening a specially crafted document in Word, Excel, or PowerPoint—but once triggered, grants full system access. It affects Windows 10, Windows 11, and Windows Server platforms spanning multiple recent versions.

• CVE-2026-45592HIGH 7.8

  A flaw in Windows Internet (wininet.dll) allows a logged-in user to gain elevated system privileges through an integer overflow condition. The vulnerability requires local access and an existing user account, but does not need user interaction once exploited. This is a local privilege escalation path that impacts a wide range of Windows versions, from Windows 10 through the latest Windows 11 and several Windows Server editions.

• CVE-2026-45593HIGH 7.8

  A use-after-free memory flaw in the Windows SDK enables a user with local access to gain elevated privileges on affected Windows systems. The vulnerability requires the attacker to be authenticated and logged in, but does not need user interaction to trigger. An attacker exploiting this could gain System-level access, potentially allowing them to install malware, modify system configurations, or access sensitive data.

• CVE-2026-37462HIGH 7.5

  A flaw in GoBGP version 4.3.0 allows an attacker to crash BGP routing services by sending specially crafted BGP UPDATE messages. The vulnerability stems from improper integer handling in the message parsing function, which doesn't validate message length correctly before processing. An attacker with network access to a BGP speaker running the vulnerable version can exploit this without authentication to trigger a denial of service.

• CVE-2026-41849HIGH 7.5

  Spring Framework versions 5.3.0 through 5.3.48 contain an integer overflow flaw in the Spring Expression Language (SpEL) evaluation engine. By crafting a malicious SpEL expression, an unauthenticated attacker can trigger uncontrolled resource consumption on the affected system, leading to denial of service. No authentication is required, and the attack can be mounted remotely over the network.

• CVE-2026-45686HIGH 7.5

  OpenTelemetry eBPF Instrumentation versions 0.7.0 through 0.8.x contain a flaw in their memcached protocol parser that allows a remote attacker to crash the instrumentation process. By sending a specially crafted memcached command with an extremely large byte count, an attacker can trigger an integer overflow that wraps the calculated payload length into a negative number, causing the process to panic and stop functioning. This results in a denial-of-service condition affecting any system relying on this instrumentation for observability.

• CVE-2026-46384HIGH 7.5

  iskorotkov/avro is a Go library used to encode and decode Avro data format, a binary serialization standard. This vulnerability allows an attacker to crash applications using versions prior to 2.33.0 by sending specially crafted binary data over the network. The attack requires no authentication and can be triggered remotely. The flaw stems from how the decoder handles large numbers from untrusted input—on 32-bit systems, a mathematical trick causes boundary checks to fail silently, while on all systems, adding very large numbers can wrap around and cause the application to panic. An attacker cannot read sensitive data or modify data, but can reliably deny service to affected applications.

• CVE-2026-47288HIGH 7.1

  CVE-2026-47288 is a high-severity integer overflow vulnerability in Windows Kerberos authentication that allows an authenticated attacker on an adjacent network to execute arbitrary code with system-level privileges. The flaw resides in how Kerberos handles certain numeric calculations, causing a wraparound condition that can be exploited to bypass security checks and inject malicious code. An attacker must already have valid credentials and network proximity to the target, which limits the immediate blast radius but makes this a serious concern for domain environments where lateral movement is a known threat model.

• CVE-2026-0039MEDIUM 6.5

  CVE-2026-0039 is an integer overflow vulnerability in Android's ubsan_throwing_runtime.cpp that allows an authenticated attacker to remotely crash or disable affected devices. The flaw resides in multiple functions and can be exploited without user interaction, making it a straightforward denial-of-service vector for anyone with network access to a vulnerable Android system.

• CVE-2026-0040MEDIUM 6.5

  CVE-2026-0040 is an integer overflow vulnerability in Google Android's ubsan_throwing_runtime.cpp file that allows an authenticated attacker to remotely crash the system. No special privileges or user interaction are required for exploitation, making this a straightforward denial-of-service attack vector. The flaw resides in multiple functions within a core runtime component, meaning the exposure is likely widespread across affected Android versions.

• CVE-2026-0041MEDIUM 6.5

  An integer overflow vulnerability exists in Google Android's UBSan (Undefined Behavior Sanitizer) runtime code. When triggered, the overflow causes the sanitizer itself to fail rather than safely handling undefined behavior, resulting in application crashes or service disruption. An authenticated attacker can remotely exploit this without user interaction, making it a network-reachable denial-of-service vector.

• CVE-2026-0044MEDIUM 6.5

  CVE-2026-0044 is an integer overflow vulnerability in Android's ubsan_throwing_runtime.cpp that allows an authenticated attacker to crash the system remotely. The flaw requires valid credentials to exploit but no user interaction, making it a straightforward denial-of-service vector that can disrupt device availability without requiring the attacker to execute code or escalate privileges.

• CVE-2026-0052MEDIUM 6.5

  CVE-2026-0052 is an integer overflow vulnerability in Android's UBSan runtime that can be triggered remotely by an authenticated attacker to crash the affected system. The flaw exists in multiple functions within ubsan_throwing_runtime.cpp and requires only network access and valid credentials—no special privileges or user interaction needed. Successful exploitation results in denial of service, making the device temporarily unavailable.

• CVE-2026-0080MEDIUM 6.5

  CVE-2026-0080 is an integer overflow vulnerability in Google Android's ubsan_throwing_runtime.cpp that allows authenticated attackers to crash affected devices remotely. The flaw requires a valid login but no special permissions, and can be triggered without user interaction—making it a practical denial-of-service vector for an attacker with baseline Android system access.

• CVE-2026-10999MEDIUM 6.5

  An integer overflow vulnerability exists in ANGLE (a graphics abstraction layer) within Google Chrome on Windows. Before version 149.0.7827.53, this flaw could allow an attacker who already controls the Chrome renderer process to read sensitive data from memory by tricking a user into viewing a specially crafted webpage. The vulnerability requires user interaction (clicking a link or visiting a malicious site) but does not allow the attacker to modify data or crash the browser.

• CVE-2026-11044MEDIUM 6.5

  A memory access bug in Chrome's graphics engine (ANGLE) allows an attacker to steal sensitive data from your browser's memory. The attacker simply needs to trick you into visiting a malicious webpage—no special privileges or software manipulation required. This affects Mac users running Chrome versions before 149.0.7827.53. The vulnerability is classified as medium severity because while an attacker can read data from memory, they cannot crash your browser or modify files.

• CVE-2026-11299MEDIUM 6.5

  A flaw in how Google Chrome handles font data can lead to information disclosure when a user visits a malicious webpage. An attacker can craft a specially designed HTML page that exploits an integer overflow vulnerability in Chrome's font processing code, potentially allowing them to read sensitive data from the browser's memory. The vulnerability affects Chrome versions before 149.0.7827.53 and requires user interaction (visiting the malicious site) to trigger.

• CVE-2026-48112MEDIUM 6.5

  7-Zip versions 9.18 through 26.00 contain a memory safety defect in their handler for Unix ar archives—specifically when parsing BSD-style symbol tables. The flaw allows an attacker to craft a malicious ar archive that, when opened by 7-Zip, causes the parser to read 4 bytes of uninitialized heap memory beyond the intended buffer boundary. This disclosure of uninitialized data could leak sensitive information from the process memory. The vulnerability requires user interaction: a victim must open the malicious archive file. Version 26.01 resolves the issue.

• CVE-2026-9882MEDIUM 6.5

  CVE-2026-9882 is a memory safety flaw in the ANGLE graphics library used by Google Chrome that allows attackers to steal data from websites you're visiting, provided they trick you into viewing a specially crafted web page. The vulnerability stems from an integer overflow—a programming error where a number wraps around unexpectedly—enabling unauthorized cross-origin data leakage. While the Chromium team rated this as "Critical," the CVSS base score of 6.5 reflects that successful exploitation requires user interaction (clicking or viewing content) and doesn't enable code execution or system-level damage. The flaw affects Chrome on Windows, macOS, and Linux systems.

• CVE-2026-49510MEDIUM 6.1

  Samsung's rlottie library, an open-source animation rendering engine, contains an integer overflow vulnerability that can be triggered when processing specially crafted input. An attacker with local access who tricks a user into opening a malicious animation file could cause the application using rlottie to crash or behave unpredictably, potentially allowing data corruption or denial of service.

• CVE-2026-0043MEDIUM 5.5

  CVE-2026-0043 is a medium-severity integer overflow vulnerability in Android's UBSan runtime library that can cause a persistent denial of service and local privilege escalation. The flaw resides in multiple functions within ubsan_throwing_runtime.cpp and requires only local access to exploit—no special privileges or user interaction are needed. Once triggered, the integer overflow can exhaust system resources or corrupt memory state, denying service to the affected device or enabling an attacker to elevate their privileges locally.

• CVE-2026-0079MEDIUM 5.5

  CVE-2026-0079 is a denial-of-service vulnerability in Android's ubsan_throwing_runtime.cpp component. An integer overflow flaw allows a local attacker to crash or hang affected systems persistently without requiring elevated privileges or user interaction. The vulnerability resides in multiple functions within the runtime component responsible for undefined behavior sanitization, making it accessible to processes running with standard user permissions.

• CVE-2026-11281MEDIUM 5.0

  Google Chrome on Windows contains an integer overflow vulnerability in its Chromoting remote desktop component that could allow a local attacker with user-level privileges to read sensitive information from the browser's memory. The attack requires user interaction and relies on sending a specially crafted Event Tracing for Windows (ETW) event. This is a local-only attack requiring existing system access, not a remote exploitation vector.

• CVE-2026-11290MEDIUM 5.0

  An integer overflow vulnerability exists in the WebView component of Google Chrome on Android devices running versions prior to 149.0.7827.53. A local attacker with limited privileges can exploit this flaw by tricking a user into opening a specially crafted file, leading to a denial of service that crashes the browser or WebView. This is a local attack that requires user interaction and does not compromise confidentiality or integrity.

• CVE-2026-41977MEDIUM 5.0

  CVE-2026-41977 is a denial-of-service vulnerability in a log service that can be triggered by local attackers with minimal privilege requirements. The flaw stems from an integer overflow condition (CWE-190) and may be exploited through user interaction to disrupt system availability and cause minor data integrity issues. While the attack requires local access and user action, the scope crosses security boundaries, making it relevant to systems where unprivileged local accounts or guest access exists.

• CVE-2026-10268LOW 3.3

  A vulnerability exists in Janet language versions up to 1.41.0 that allows an integer overflow when processing serialized fiber data. An attacker with local system access can exploit this condition to cause a denial of service by crashing the affected application. The vulnerability is not critical but represents a real risk in environments where untrusted users have local access to systems running vulnerable Janet versions.

• CVE-2026-10722LOW 3.3

  A local integer overflow vulnerability exists in Cilium eBPF's BTF (BPF Type Format) loading functionality. An attacker with local system access can manipulate offset parameters during eBPF collection loading, causing the application to miscalculate memory boundaries. While the impact is limited to denial of service on the affected system, the public disclosure means exploitation tools may become available. This is a localized threat requiring prior system access but warrants patching to maintain system stability.