CWE-190 · Memory Corruption
Integer Overflow
3,565CVEs
22exploited
5with a public check
87likely (EPSS 10%+)
SortMost likely exploited
3,565 CVEs with CWE-190 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-30860In CISA KEVExploitedAn integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7…Apple · macOS · CVSS 7.8 · 2021-08-24 | 7.8 | 76% | 2021-08-24 |
| CVE-2026-97229In CISA KEVExploitedGitLab CE/EE < 19.2.8 / 19.3.5 / 19.4.2 - Unauthenticated RCE via Onigmo Integer OverflowGitLab · GitLab · CVSS 10 · 2026-10-13 | 10.0 | 69% | 2026-10-13 |
| CVE-2015-8651In CISA KEVExploitedInteger overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Ado…Adobe · Flash Player · CVSS 8.8 · 2015-12-28 | 8.8 | 68% | 2015-12-28 |
| CVE-2013-2729In CISA KEVExploitedInteger overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a di…Adobe · Reader and Acrobat · CVSS 8.8 · 2013-05-16 | 8.8 | 67% | 2013-05-16 |
| CVE-2018-6065In CISA KEVExploitedInteger overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to po…Google · Chrome · CVSS 8.8 · 2018-11-14 | 8.8 | 60% | 2018-11-14 |
| CVE-2023-32434In CISA KEVExploitedAn integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 15.7.7, macOS Monterey 12.6.7,…Apple · macOS · CVSS 7.8 · 2023-06-23 | 7.8 | 58% | 2023-06-23 |
| CVE-2011-1823In CISA KEVExploitedThe vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code a…Android · Android OS · CVSS 7.8 · 2011-06-09 | 7.8 | 41% | 2011-06-09 |
| CVE-2022-0185In CISA KEVExploitedA heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters…Linux · kernel · CVSS 8.4 · 2022-02-11 | 8.4 | 25% | 2022-02-11 |
| CVE-2012-5054In CISA KEVExploitedInteger overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malformed argume…Adobe · Flash Player · CVSS 8.8 · 2012-09-24 | 8.8 | 21% | 2012-09-24 |
| CVE-2016-1010In CISA KEVExploitedInteger overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR before 21.0.0.176,…Adobe · Flash Player and AIR · CVSS 8.8 · 2016-03-12 | 8.8 | 19% | 2016-03-12 |
| CVE-2023-6345In CISA KEVExploitedInteger overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…Google · Chrome · CVSS 9.6 · 2023-11-29 | 9.6 | 16% | 2023-11-29 |
| CVE-2018-14634In CISA KEVExploitedAn integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use th…The Linux Foundation · kernel · CVSS 7.8 · 2018-09-25 | 7.8 | 15% | 2018-09-25 |
| CVE-2024-38080In CISA KEVExploitedWindows Hyper-V Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2022 · CVSS 7.8 · 2024-07-09 | 7.8 | 7.1% | 2024-07-09 |
| CVE-2021-30952In CISA KEVExploitedAn integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2, watchOS 8.3. Proces…Apple · watchOS · CVSS 8.8 · 2021-08-24 | 8.8 | 7.0% | 2021-08-24 |
| CVE-2023-2136In CISA KEVExploitedInteger overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a…Google · Chrome · CVSS 9.6 · 2023-04-19 | 9.6 | 5.8% | 2023-04-19 |
| CVE-2023-21823In CISA KEVExploitedWindows Graphics Component Remote Code Execution VulnerabilityMicrosoft · Microsoft Office for Android · CVSS 7.8 · 2023-02-14 | 7.8 | 5.6% | 2023-02-14 |
| CVE-2025-24985In CISA KEVExploitedWindows Fast FAT File System Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-03-11 | 7.8 | 3.9% | 2025-03-11 |
| CVE-2021-30663In CISA KEVExploitedAn integer overflow was addressed with improved input validation. This issue is fixed in iOS 14.5.1 and iPadOS 14.5.1, tvOS 14.6, iOS 12.5.3, Safari 14.1.1, macOS Big Sur 11.3.1.…Apple · macOS · CVSS 7.8 · 2021-09-08 | 7.8 | 3.5% | 2021-09-08 |
| CVE-2013-2596In CISA KEVExploitedInteger overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows…Linux · Kernel · CVSS 7.8 · 2013-04-13 | 7.8 | 3.2% | 2013-04-13 |
| CVE-2025-48595In CISA KEVExploitedIn multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution…Google · Android · CVSS 8.4 · 2026-06-01 | 8.4 | 1.9% | 2026-06-01 |
| CVE-2026-21385In CISA KEVExploitedInteger Overflow or Wraparound in GraphicsQualcomm, Inc. · Snapdragon · CVSS 7.8 · 2026-03-02 | 7.8 | 1.3% | 2026-03-02 |
| CVE-2023-33107In CISA KEVExploitedInteger Overflow or Wraparound in Graphics LinuxQualcomm, Inc. · Snapdragon · CVSS 8.4 · 2023-12-05 | 8.4 | 1.0% | 2023-12-05 |
| CVE-2016-8706CheckMemcached Server SASL Authentication - Remote Code ExecutionMemcached · Memcached · CVSS 8.1 · 2017-01-06 | 8.1 | 46% | 2017-01-06 |
| CVE-2025-46817CheckRedis < 8.2.1 lua script - Integer Overflowredis · redis · CVSS 7 · 2025-10-03 | 7.0 | 3.9% | 2025-10-03 |
| CVE-2022-0968CheckMicroweber <1.2.12 - Integer Overflowmicroweber · microweber/microweber · CVSS 7.2 · 2022-03-15 | 7.2 | 3.7% | 2022-03-15 |
| CVE-2025-46819CheckRedis < 8.2.1 Lua Long-String Delimiter - Out-of-Bounds Readredis · redis · CVSS 6.3 · 2025-10-03 | 6.3 | 1.1% | 2025-10-03 |
| CVE-2026-116366CheckClickHouse Server - Brotli v1.2.0 Decoder DoS/OOB-WriteClickHouse · ClickHouse · CVSS 9.5 · 2026-10-30 | 9.5 | 1.0% | 2026-10-30 |
| CVE-2020-16040Insufficient data validation in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Google · Chrome · 2021-01-08 | – | 100% | 2021-01-08 |
| CVE-2019-11477Integer overflow in TCP_SKB_CB(skb)->tcp_gso_segsLinux · Linux kernel · CVSS 7.5 · 2019-06-18 | 7.5 | 99% | 2019-06-18 |
| CVE-2023-44443GIMP PSP File Parsing Integer Overflow Remote Code Execution VulnerabilityGIMP · GIMP · CVSS 7.8 · 2024-05-03 | 7.8 | 94% | 2024-05-03 |
| CVE-2014-0569Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Ado…Adobe · Flash Player · 2014-10-15 | – | 91% | 2014-10-15 |
| CVE-2017-3599Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.35 and earlier and 5.7.17 and earl…Oracle · Mysql · 2017-04-24 | – | 90% | 2017-04-24 |
| CVE-2023-21716Microsoft Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 9.8 · 2023-02-14 | 9.8 | 85% | 2023-02-14 |
| CVE-2019-11072lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact…Lighttpd · Lighttpd · 2019-04-10 | – | 74% | 2019-04-10 |
| CVE-2011-3026Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown…Google · Chrome · 2012-02-16 | – | 73% | 2012-02-16 |
| CVE-2024-49112Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 9.8 · 2024-12-10 | 9.8 | 72% | 2024-12-10 |
| CVE-2023-22458Integer overflow in multiple Redis commands can lead to denial-of-serviceredis · redis · CVSS 5.5 · 2023-01-20 | 5.5 | 72% | 2023-01-20 |
| CVE-2020-13579An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document…Softmaker · Softmaker Software · CVSS 8.8 · 2021-02-04 | 8.8 | 71% | 2021-02-04 |
| CVE-2020-6113An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when updating its cross-reference table. When proces…Gonitro · Nitro Pro · CVSS 8.8 · 2020-09-17 | 8.8 | 64% | 2020-09-17 |
| CVE-2017-7529Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive in…nginx · nginx · 2017-07-13 | – | 63% | 2017-07-13 |
| CVE-2021-40346An integer overflow exists in HAProxy 2.0 through 2.5 in htx_add_header that can be exploited to perform an HTTP request smuggling attack, allowing an attacker to bypass all confi…Haproxy · Haproxy · 2021-09-08 | – | 59% | 2021-09-08 |
| CVE-2002-0391Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to exec…Freebsd · Freebsd · CVSS 9.8 · 2003-04-02 | 9.8 | 58% | 2003-04-02 |
| CVE-2008-1083Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote atta…Microsoft · Windows 2000 · CVSS 8.1 · 2008-04-08 | 8.1 | 57% | 2008-04-08 |
| CVE-2022-23521gitattributes parsing integer overflow in gitgit · git · CVSS 9.8 · 2023-01-17 | 9.8 | 56% | 2023-01-17 |
| CVE-2016-3078Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application cr…Php · Php · 2016-08-07 | – | 56% | 2016-08-07 |
| CVE-2021-23840Integer overflow in CipherUpdateOpenSSL · OpenSSL · CVSS 7.5 · 2021-02-16 | 7.5 | 51% | 2021-02-16 |
| CVE-2008-1446Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Serv…Microsoft · Internet Information Services · 2008-10-15 | – | 46% | 2008-10-15 |
| CVE-2016-2177OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and a…Openssl · Openssl · 2016-06-20 | – | 45% | 2016-06-20 |
| CVE-2022-41903Integer overflow in `git archive`, `git log --format` leading to RCE in gitgit · git · CVSS 9.8 · 2023-01-17 | 9.8 | 44% | 2023-01-17 |
| CVE-2021-31642A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulner…Chiyu-Tech · Semac S2 Firmware · 2021-06-01 | – | 44% | 2021-06-01 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.