Vulnerabilities (CVE)

Filtered by CWE-190
Total 3557 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-21350 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2026-08-10 N/A 8.8 HIGH
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVE-2023-36911 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-10 N/A 9.8 CRITICAL
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36910 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-10 N/A 9.8 CRITICAL
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36900 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-10 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2023-36866 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-08-10 N/A 7.8 HIGH
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2023-35385 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-10 N/A 9.8 CRITICAL
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35383 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-10 N/A 7.5 HIGH
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2023-35381 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-08-10 N/A 8.8 HIGH
Windows Fax Service Remote Code Execution Vulnerability
CVE-2023-35372 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-08-10 N/A 7.8 HIGH
Microsoft Office Visio Remote Code Execution Vulnerability
CVE-2021-34536 1 Microsoft 3 Windows 10, Windows Server 2016, Windows Server 2019 2026-08-10 4.6 MEDIUM 7.8 HIGH
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-34513 1 Microsoft 2 Windows 10, Windows Server 2016 2026-08-10 7.2 HIGH 7.8 HIGH
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-34512 1 Microsoft 3 Windows 10, Windows Server 2016, Windows Server 2019 2026-08-10 7.2 HIGH 7.8 HIGH
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-34510 1 Microsoft 3 Windows 10, Windows Server 2016, Windows Server 2019 2026-08-10 4.6 MEDIUM 7.8 HIGH
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2026-66757 2 Gimp, Redhat 2 Gimp, Enterprise Linux 2026-08-10 N/A 5.5 MEDIUM
A flaw was found in the file-sgi plugin in GIMP. When processing an RLE-compressed SGI image, the plugin allocates memory for a row table. The image header dimensions (ysize and zsize) are read as 16-bit unsigned integers. If a crafted file sets both dimensions to their maximum value (65535), the multiplication ysize * zsize overflows the standard 32-bit int boundary before being passed to calloc. This integer overflow issue results in undefined behavior, aborting the plugin and causing a denial of service.
CVE-2026-48933 1 Nodejs 1 Node.js 2026-08-10 N/A 7.5 HIGH
A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
CVE-2026-54417 2026-08-10 N/A 7.5 HIGH
An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive. mtar_next computes the offset to the next record as round_up(h.size, 512) + sizeof(mtar_raw_header_t) using 32-bit arithmetic.
CVE-2026-3945 2026-08-10 7.8 HIGH 7.5 HIGH
An integer overflow vulnerability in the HTTP chunked transfer encoding parser in tinyproxy up to and including version 1.11.3 allows an unauthenticated remote attacker to cause a denial of service (DoS). The issue occurs because chunk size values are parsed using strtol without properly validating overflow conditions (e.g., errno == ERANGE).
CVE-2026-19174 1 Google 1 Chrome 2026-08-07 N/A 8.8 HIGH
Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19167 1 Google 1 Chrome 2026-08-07 N/A 3.1 LOW
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
CVE-2026-66039 1 Ffmpeg 1 Ffmpeg 2026-08-07 N/A 8.8 HIGH
FFmpeg through 8.1.2, fixed in commit aafb5c6, contains a signed integer overflow vulnerability in the MACE6 audio decoder that allows attackers to corrupt heap memory by supplying a crafted CAF file with a malicious bytes_per_packet value. Attackers can craft a CAF file with oversized bytes_per_packet and frames_per_packet values in the desc chunk to trigger an integer overflow in mace_decode_frame() during output sample count computation, resulting in an undersized buffer allocation and heap out-of-bounds write that could enable code execution.