Weakness (CWE)

CWE-191: Integer Underflow (Wrap or Wraparound)

Base Draft

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

More detail

This can happen in signed and unsigned cases.

Source: MITRE CWE-191

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

High 7.5

CVE-2026-58249 Public exploit

Memory Corruption vulnerability in SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the…

SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager)

Oct 13, 2026
High 7.8

CVE-2026-42980 Public exploit

NT OS Kernel Elevation of Privilege Vulnerability

Integer underflow (wrap or wraparound) in Windows NT OS Kernel allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 9, 2026
High 7.5

CVE-2026-25075 Public exploit

strongSwan 4.5.0 < 6.0.5 EAP-TTLS AVP Parsing Integer Underflow

strongSwan versions 4.5.0 prior to 6.0.5 contain an integer underflow vulnerability in the EAP-TTLS AVP parser that allows unauthenticated remote attackers to cause a denial of service by sending crafted AVP data with invalid length fields during IKEv2 authen…

strongSwan strongSwan strongswan strongswan Debian Ubuntu

Mar 23, 2026
High 7.0

CVE-2025-49744 Public exploit

Windows Graphics Component Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jul 8, 2025
High 7.8

CVE-2024-11477 Public exploit EPSS 22%

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerabili…

7-Zip 7-Zip qt6-qtwebengine qt5-qtwebengine Debian Ubuntu Alpine

Nov 22, 2024
High 7.8

CVE-2023-28293 Public exploit

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Apr 11, 2023
High 7.8

CVE-2021-31956 Exploited Public exploit EPSS 22%

Windows NTFS Elevation of Privilege Vulnerability

Windows NTFS Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Jun 8, 2021
KEV Nov 3, 2021
High 8.8

CVE-2014-0497 Exploited Public exploit EPSS 100%

Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and M…

Feb 5, 2014
KEV Sep 17, 2024