CWE-197 · Memory Corruption
Numeric Truncation Error
94CVEs
SortMost likely exploited
94 CVEs with CWE-197 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-42475In CISA KEVExploitedA heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0.0 through 7.0.8, 6.4.0 through 6.4.10, 6.2.0 through 6.2.11, 6.0.15 and earlier an…Fortinet · FortiProxy · CVSS 9.3 · 2023-01-02 | 9.3 | 99% | 2023-01-02 |
| CVE-2025-6965Integer Truncation on SQLiteSQLite · SQLite · CVSS 7.2 · 2025-07-15 | 7.2 | 73% | 2025-07-15 |
| CVE-2024-21310Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-01-09 | 7.8 | 12% | 2024-01-09 |
| CVE-2024-43639Windows KDC Proxy Remote Code Execution VulnerabilityMicrosoft · Windows Server 2025 · CVSS 9.8 · 2024-11-12 | 9.8 | 8.9% | 2024-11-12 |
| CVE-2024-38125Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-08-13 | 7.8 | 5.9% | 2024-08-13 |
| CVE-2024-28944Microsoft OLE DB Driver for SQL Server Remote Code Execution VulnerabilityMicrosoft · Microsoft SQL Server 2019 (GDR) · CVSS 8.8 · 2024-04-09 | 8.8 | 2.4% | 2024-04-09 |
| CVE-2024-38044DHCP Server Service Remote Code Execution VulnerabilityMicrosoft · Windows Server 2019 · CVSS 7.2 · 2024-07-09 | 7.2 | 2.1% | 2024-07-09 |
| CVE-2024-21440Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-03-12 | 8.8 | 2.0% | 2024-03-12 |
| CVE-2024-21451Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-03-12 | 8.8 | 1.9% | 2024-03-12 |
| CVE-2024-30009Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-05-14 | 8.8 | 1.7% | 2024-05-14 |
| CVE-2024-37337Microsoft SQL Server Native Scoring Information Disclosure VulnerabilityMicrosoft · Microsoft SQL Server 2017 (CU 31) · CVSS 7.1 · 2024-09-10 | 7.1 | 1.7% | 2024-09-10 |
| CVE-2024-49018SQL Server Native Client Remote Code Execution VulnerabilityMicrosoft · Microsoft SQL Server 2017 (GDR) · CVSS 8.8 · 2024-11-12 | 8.8 | 1.6% | 2024-11-12 |
| CVE-2024-21391Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.8 · 2024-02-13 | 8.8 | 1.6% | 2024-02-13 |
| CVE-2024-21352Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.8 · 2024-02-13 | 8.8 | 1.6% | 2024-02-13 |
| CVE-2024-30024Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-05-14 | 7.5 | 1.5% | 2024-05-14 |
| CVE-2024-30023Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-05-14 | 7.5 | 1.5% | 2024-05-14 |
| CVE-2024-30022Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-05-14 | 7.5 | 1.5% | 2024-05-14 |
| CVE-2024-43519Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 8.8 · 2024-10-08 | 8.8 | 1.5% | 2024-10-08 |
| CVE-2024-30029Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-05-14 | 7.5 | 1.5% | 2024-05-14 |
| CVE-2024-30015Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-05-14 | 7.5 | 1.5% | 2024-05-14 |
| CVE-2024-30014Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-05-14 | 7.5 | 1.5% | 2024-05-14 |
| CVE-2023-36641A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions,…Fortinet · FortiOS · CVSS 6.2 · 2023-11-14 | 6.2 | 1.4% | 2023-11-14 |
| CVE-2020-15202Integer truncation in Shard API usagetensorflow · tensorflow · CVSS 9 · 2020-09-25 | 9.0 | 1.3% | 2020-09-25 |
| CVE-2024-29050Windows Cryptographic Services Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.4 · 2024-04-09 | 8.4 | 1.3% | 2024-04-09 |
| CVE-2023-32143D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution VulnerabilityD-Link · DAP-1360 · CVSS 8.8 · 2024-05-03 | 8.8 | 1.1% | 2024-05-03 |
| CVE-2026-111308Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2026-11-10 | 8.8 | 0.9% | 2026-11-10 |
| CVE-2023-36710Windows Media Foundation Core Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-10-10 | 7.8 | 0.9% | 2023-10-10 |
| CVE-2024-21429Windows USB Hub Driver Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.8 · 2024-03-12 | 6.8 | 0.9% | 2024-03-12 |
| CVE-2026-42944Heap overflow with multiple NSID, COOKIE, PADDING EDNS optionsNLnet Labs · Unbound · CVSS 7.5 · 2026-05-20 | 7.5 | 0.8% | 2026-05-20 |
| CVE-2024-21434Microsoft Windows SCSI Class System File Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-03-12 | 7.8 | 0.8% | 2024-03-12 |
| CVE-2026-78512Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2026-09-08 | 8.8 | 0.8% | 2026-09-08 |
| CVE-2026-13269Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service VulnerabilityQuest · NetVault Backup · CVSS 7.5 · 2026-11-12 | 7.5 | 0.8% | 2026-11-12 |
| CVE-2024-21377Windows DNS Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 5.5 · 2024-02-13 | 5.5 | 0.6% | 2024-02-13 |
| CVE-2026-119988Windows SMB Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.1 · 2026-11-10 | 7.1 | 0.6% | 2026-11-10 |
| CVE-2026-108451Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 8.8 · 2026-10-15 | 8.8 | 0.6% | 2026-10-15 |
| CVE-2024-38086Azure Kinect SDK Remote Code Execution VulnerabilityMicrosoft · Azure Kinect SDK · CVSS 6.4 · 2024-07-09 | 6.4 | 0.6% | 2024-07-09 |
| CVE-2026-96280Flatpak: flatpak: buffer overflow in oci delta stream path names on 32-bit systemsRed Hat · Red Hat Enterprise Linux 10 · CVSS 7.5 · 2026-09-27 | 7.5 | 0.6% | 2026-09-27 |
| CVE-2026-55142Microsoft Word Information Disclosure VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 5.5 · 2026-07-14 | 5.5 | 0.6% | 2026-07-14 |
| CVE-2026-19667Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`ISC · BIND 9 · CVSS 7.5 · 2026-09-16 | 7.5 | 0.6% | 2026-09-16 |
| CVE-2026-73523COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer TruncationCOVESA · Open1722 · CVSS 7.5 · 2026-08-17 | 7.5 | 0.5% | 2026-08-17 |
| CVE-2025-53723Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-08-12 | 7.8 | 0.5% | 2025-08-12 |
| CVE-2026-87529Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML pa…Google · Chrome · CVSS 9.6 · 2026-09-09 | 9.6 | 0.5% | 2026-09-09 |
| CVE-2026-112750Windows Overlay Filter Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 5.5 · 2026-11-10 | 5.5 | 0.5% | 2026-11-10 |
| CVE-2026-68804Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2026-08-11 | 7.8 | 0.5% | 2026-08-11 |
| CVE-2026-63525Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2026-08-11 | 7.8 | 0.5% | 2026-08-11 |
| CVE-2026-126254A numeric truncation error vulnerability in Fortinet FortiOS 8.0.0 through 8.0.1, FortiOS 7.6.0 through 7.6.7, FortiOS 7.4.0 through 7.4.12, FortiOS 7.2.0 through 7.2.13 may allow…Fortinet · FortiOS · CVSS 9.6 · 2026-11-11 | 9.6 | 0.5% | 2026-11-11 |
| CVE-2026-117069An integer truncation vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) via c…No vendor recorded · CVSS 7.5 · 2026-11-02 | 7.5 | 0.5% | 2026-11-02 |
| CVE-2026-115889Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilationbytecodealliance · wasmtime · CVSS 9.9 · 2026-10-23 | 9.9 | 0.5% | 2026-10-23 |
| CVE-2025-49679Windows Shell Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-07-08 | 7.8 | 0.4% | 2025-07-08 |
| CVE-2023-35328Windows Transaction Manager Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-07-11 | 7.8 | 0.4% | 2023-07-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.