Skip to content

CWE-197 · weakness in Memory Corruption

Numeric Truncation Error

94 CVEs · 1 exploited

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
likely to be exploited
2

Every one of the 94 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier an…CVE-2022-42475Fortinet · CVSS 9.3 · 99% likelycovered by CyberSIXT

    FortinetUNC38861 article

  2. Integer Truncation on SQLiteCVE-2025-6965SQLite · CVSS 7.2 · 73% likely

    SQLite

  3. Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityCVE-2024-21310Microsoft · CVSS 7.8 · 12% likely

    Microsoft

  4. Windows KDC Proxy Remote Code Execution VulnerabilityCVE-2024-43639Microsoft · CVSS 9.8 · 8.9% likely

    Microsoft

  5. Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityCVE-2024-38125Microsoft · CVSS 7.8 · 5.9% likely

    Microsoft

  6. Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityCVE-2024-28944Microsoft · CVSS 8.8 · 2.4% likely

    Microsoft

  7. DHCP Server Service Remote Code Execution VulnerabilityCVE-2024-38044Microsoft · CVSS 7.2 · 2.1% likely

    Microsoft

  8. Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2024-21440Microsoft · CVSS 8.8 · 2.0% likely

    Microsoft

  9. Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2024-21451Microsoft · CVSS 8.8 · 1.9% likely

    Microsoft

  10. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30009Microsoft · CVSS 8.8 · 1.7% likely

    Microsoft

  11. Microsoft SQL Server Native Scoring Information Disclosure VulnerabilityCVE-2024-37337Microsoft · CVSS 7.1 · 1.7% likely

    Microsoft

  12. SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49018Microsoft · CVSS 8.8 · 1.6% likely

    Microsoft

  13. Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-21391Microsoft · CVSS 8.8 · 1.6% likely

    Microsoft

  14. Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-21352Microsoft · CVSS 8.8 · 1.6% likely

    Microsoft

  15. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30024Microsoft · CVSS 7.5 · 1.5% likely

    Microsoft

  16. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30023Microsoft · CVSS 7.5 · 1.5% likely

    Microsoft

  17. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30022Microsoft · CVSS 7.5 · 1.5% likely

    Microsoft

  18. Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityCVE-2024-43519Microsoft · CVSS 8.8 · 1.5% likely

    Microsoft

  19. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30029Microsoft · CVSS 7.5 · 1.5% likely

    Microsoft

  20. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30015Microsoft · CVSS 7.5 · 1.5% likely

    Microsoft

  21. Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityCVE-2024-30014Microsoft · CVSS 7.5 · 1.5% likely

    Microsoft

  22. A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions,…CVE-2023-36641Fortinet · CVSS 6.2 · 1.4% likely

    Fortinet

  23. Integer truncation in Shard API usageCVE-2020-15202tensorflow · CVSS 9 · 1.3% likely

    TensorFlow

  24. Windows Cryptographic Services Remote Code Execution VulnerabilityCVE-2024-29050Microsoft · CVSS 8.4 · 1.3% likely

    Microsoft

  25. D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution VulnerabilityCVE-2023-32143D-Link · CVSS 8.8 · 1.1% likely

    D-Link

  26. Microsoft Office Word Remote Code Execution VulnerabilityCVE-2026-111308Microsoft · CVSS 8.8 · 0.9% likely

    Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in