CWE-197 · 63 records

Numeric Truncation Error

CVEs in this class

63 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
99Now	CVE-2022-42475Weaponized	A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.fortinet · fortios · CWE-197 pre-auth RCE	Critical9.8	KEV	99.5%	Jan 2, 2023
49Plan	CVE-2025-6965Proof of concept	Integer Truncation on SQLitesqlite · sqlite · CWE-197	High7.2	—	71.4%	Jul 15, 2025
42Plan	CVE-2024-43639No exploit	Windows KDC Proxy Remote Code Execution Vulnerabilitymicrosoft · windows server 2012 · CWE-197 pre-auth RCE	Critical9.8	—	8.9%	Nov 12, 2024
38Monitor	CVE-2026-87529No exploit	Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code ougoogle · chrome · CWE-197 pre-auth RCE	Critical9.6	—	0.5%	Sep 8, 2026
36Monitor	CVE-2024-28944No exploit	Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerabilitymicrosoft · ole db driver for sql server · CWE-197 pre-auth RCE	High8.8	—	2.4%	Apr 9, 2024
36Monitor	CVE-2024-21440No exploit	Microsoft ODBC Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 pre-auth RCE	High8.8	—	2.0%	Mar 12, 2024
36Monitor	CVE-2024-21451No exploit	Microsoft ODBC Driver Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 pre-auth RCE	High8.8	—	1.9%	Mar 12, 2024
36Monitor	CVE-2024-30009No exploit	Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 pre-auth RCE	High8.8	—	1.7%	May 14, 2024
36Monitor	CVE-2020-15202No exploit	Integer truncation in Shard API usagegoogle · tensorflow · CWE-197 Pre-auth	Critical9.0	—	1.3%	Sep 25, 2020
35Monitor	CVE-2024-21352No exploit	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 pre-auth RCE	High8.8	—	1.6%	Feb 13, 2024
35Monitor	CVE-2024-21391No exploit	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 pre-auth RCE	High8.8	—	1.6%	Feb 13, 2024
35Monitor	CVE-2024-49018No exploit	SQL Server Native Client Remote Code Execution Vulnerabilitymicrosoft · sql server 2016 · CWE-197 pre-auth RCE	High8.8	—	1.5%	Nov 12, 2024
35Monitor	CVE-2024-43519No exploit	Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 pre-auth RCE	High8.8	—	1.5%	Oct 8, 2024
35Monitor	CVE-2023-32143No exploit	D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerabilitydlink · dap-1360 firmware · CWE-197 pre-auth RCE	High8.8	—	1.1%	May 2, 2024
34Monitor	CVE-2024-21310No exploit	Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1809 · CWE-197 Local privilege escalation	High7.8	—	11.5%	Jan 9, 2024
34Monitor	CVE-2026-42944No exploit	Heap overflow with multiple NSID, COOKIE, PADDING EDNS optionsnlnetlabs · unbound · CWE-197 Pre-auth	High8.7	—	0.8%	May 20, 2026
34Monitor	CVE-2026-73523No exploit	COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncationcovesa · open1722 · CWE-197 Pre-auth	High8.7	—	0.5%	Aug 17, 2026
33Monitor	CVE-2024-38125No exploit	Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 Local privilege escalation	High7.8	—	5.9%	Aug 13, 2024
31Monitor	CVE-2024-29050Proof of concept	Windows Cryptographic Services Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 RCE	High7.8	—	1.3%	Apr 9, 2024
31Monitor	CVE-2023-36710No exploit	Windows Media Foundation Core Remote Code Execution Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 RCE	High7.8	—	1.1%	Oct 10, 2023
31Monitor	CVE-2024-21434No exploit	Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 Local privilege escalation	High7.8	—	0.8%	Mar 12, 2024
31Monitor	CVE-2026-44823No exploit	Microsoft Excel Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-197 RCE	High7.8	—	0.5%	Jun 9, 2026
31Monitor	CVE-2026-63525No exploit	Microsoft Office Word Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-197 RCE	High7.8	—	0.5%	Aug 11, 2026
31Monitor	CVE-2023-35328No exploit	Windows Transaction Manager Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 Local privilege escalation	High7.8	—	0.4%	Jul 11, 2023
31Monitor	CVE-2025-49679No exploit	Windows Shell Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 · CWE-197 Local privilege escalation	High7.8	—	0.4%	Jul 8, 2025

CVE-2022-42475
99Now
A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- pre-auth RCE
fortinet · fortiosJan 2, 2023
CVE-2025-6965
49Plan
Integer Truncation on SQLite
HighCVSS 7.2Proof of conceptEPSS 71%
sqlite · sqliteJul 15, 2025
CVE-2024-43639
42Plan
Windows KDC Proxy Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 9%
- pre-auth RCE
microsoft · windows server 2012Nov 12, 2024
CVE-2026-87529
38Monitor
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code ou
CriticalCVSS 9.6No exploitEPSS 1%
- pre-auth RCE
google · chromeSep 8, 2026
CVE-2024-28944
36Monitor
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · ole db driver for sql serverApr 9, 2024
CVE-2024-21440
36Monitor
Microsoft ODBC Driver Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · windows 10 1507Mar 12, 2024
CVE-2024-21451
36Monitor
Microsoft ODBC Driver Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · windows 10 1507Mar 12, 2024
CVE-2024-30009
36Monitor
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · windows 10 1507May 14, 2024
CVE-2020-15202
36Monitor
Integer truncation in Shard API usage
CriticalCVSS 9.0No exploitEPSS 1%
- Pre-auth
google · tensorflowSep 25, 2020
CVE-2024-21352
35Monitor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · windows 10 1507Feb 13, 2024
CVE-2024-21391
35Monitor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · windows 10 1507Feb 13, 2024
CVE-2024-49018
35Monitor
SQL Server Native Client Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
microsoft · sql server 2016Nov 12, 2024
CVE-2024-43519
35Monitor
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
microsoft · windows 10 1507Oct 8, 2024
CVE-2023-32143
35Monitor
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
dlink · dap-1360 firmwareMay 2, 2024
CVE-2024-21310
34Monitor
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 12%
- Local privilege escalation
microsoft · windows 10 1809Jan 9, 2024
CVE-2026-42944
34Monitor
Heap overflow with multiple NSID, COOKIE, PADDING EDNS options
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
nlnetlabs · unboundMay 20, 2026
CVE-2026-73523
34Monitor
COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
covesa · open1722Aug 17, 2026
CVE-2024-38125
33Monitor
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 6%
- Local privilege escalation
microsoft · windows 10 1507Aug 13, 2024
CVE-2024-29050
31Monitor
Windows Cryptographic Services Remote Code Execution Vulnerability
HighCVSS 7.8Proof of conceptEPSS 1%
- RCE
microsoft · windows 10 1507Apr 9, 2024
CVE-2023-36710
31Monitor
Windows Media Foundation Core Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 1%
- RCE
microsoft · windows 10 1507Oct 10, 2023
CVE-2024-21434
31Monitor
Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 1%
- Local privilege escalation
microsoft · windows 10 1507Mar 12, 2024
CVE-2026-44823
31Monitor
Microsoft Excel Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
microsoft · 365 appsJun 9, 2026
CVE-2026-63525
31Monitor
Microsoft Office Word Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
microsoft · 365 appsAug 11, 2026
CVE-2023-35328
31Monitor
Windows Transaction Manager Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507Jul 11, 2023
CVE-2025-49679
31Monitor
Windows Shell Elevation of Privilege Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
microsoft · windows 10 1507Jul 8, 2025

All vulnerability classes