Skip to content

CWE-191 · weakness in Memory Corruption

Integer Underflow (Wrap or Wraparound)

592 CVEs · 2 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
2
likely to be exploited
16

Every one of the 592 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote att…CVE-2014-0497Adobe · CVSS 8.8 · 100% likely

    Adobe

  2. Windows NTFS Elevation of Privilege VulnerabilityCVE-2021-31956Microsoft · CVSS 7.8 · 22% likely

    Microsoft

  3. An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in the Certificate List Exact Assertion processing, resulting in denial of service.CVE-2020-36228Openldap · 85% likely

    Openldap

  4. An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in the Certificate Exact Assertion processing, resulting in denial of service (schema_init.c…CVE-2020-36221Openldap · 85% likely

    Openldap

  5. Windows TCP/IP Remote Code Execution VulnerabilityCVE-2024-38063Microsoft · CVSS 9.8 · 74% likely

    Microsoft

  6. Integer underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause…CVE-2017-14496Thekelleys · 68% likely

    Thekelleys

  7. Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.CVE-2023-311027-Zip · CVSS 7.8 · 54% likely

    7-Zip

  8. A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database Engine Remote Code Execution Vulnerabilit…CVE-2020-1400Microsoft · 24% likely

    Microsoft

  9. 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution VulnerabilityCVE-2024-114777-Zip · CVSS 7.8 · 22% likely

    7-Zip

  10. Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1…CVE-2007-0063Vmware · 20% likely

    VMware

  11. Multiple Integer underflows in the geonet_print function in tcpdump 4.5.0 through 4.6.2, when in verbose mode, allow remote attackers to cause a denial of service (segmentation fa…CVE-2014-8768Redhat · 20% likely

    Red Hat

  12. Integer underflow in the Lists_MakeMask() function in lists.c in ngIRCd before 0.8.2 allows remote attackers to cause a denial of service (application crash) and possibly execute…CVE-2005-0199Barton · 19% likely
  13. Microsoft Office Information Disclosure VulnerabilityCVE-2021-31178Microsoft · CVSS 5.5 · 16% likely

    Microsoft

  14. Named Pipe File System Elevation of Privilege VulnerabilityCVE-2022-22715Microsoft · CVSS 7.8 · 14% likely

    Microsoft

  15. Integer underflow in filter/ww8/ww8par2.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitra…CVE-2009-3301Apache · 12% likely

    Apache

  16. Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP pack…CVE-2004-0816Linux · 12% likely

    Linux

  17. DHCP Server Service Denial of Service VulnerabilityCVE-2023-38162Microsoft · CVSS 7.5 · 11% likely

    Microsoft

  18. Integer underflow in the _gdContributionsAlloc function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.4 allows remote attackers to have unspecified impac…CVE-2016-10166Libgd · 11% likely

    Libgd1 bounty report

  19. NT OS Kernel Elevation of Privilege VulnerabilityCVE-2026-42980Microsoft · CVSS 7.8 · 9.2% likelycovered by CyberSIXT

    Microsoft

  20. Integer underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the configuration setting "Load printer settings with the document" is enabled, allows remot…CVE-2015-5212Libreoffice · 8.7% likely

    Libreoffice

  21. Exim libspf2 Integer Underflow Remote Code Execution VulnerabilityCVE-2023-42118Exim · CVSS 7.5 · 8.4% likely

    Exim

  22. rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function seamless_process() and results in memory corru…CVE-2018-20181Rdesktop · 8.2% likely

    Rdesktop

  23. rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function rdpsnddbg_process() and results in memory corr…CVE-2018-20180Rdesktop · 8.2% likely

    Rdesktop

  24. rdesktop versions up to and including v1.8.3 contain an Integer Underflow that leads to a Heap-Based Buffer Overflow in the function lspci_process() and results in memory corrupti…CVE-2018-20179Rdesktop · 6.8% likely

    Rdesktop

  25. A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is…CVE-2020-1239Microsoft · 6.1% likely

    Microsoft

  26. Integer underflow in the ksba_oid_to_str function in Libksba before 1.3.2, as used in GnuPG, allows remote attackers to cause a denial of service (crash) via a crafted OID in a (1…CVE-2014-9087Gnupg · 5.7% likely

    Gnupg

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.