CWE-190: Integer overflow
3,857 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 22 of them as exploited in the wild.
- Published CVEs
- 3,857
- Last 12 months
- 1,012
- Critical
- 469
- Known exploited
- 22
Critical 469High 2,297Medium 984Low 102Not scored 5
CVEs per yearBy the year they were published
- 201846
- 201824
- 2019213
- 201923
- 20193
- 2021202
- 2024278
- 2025249
- 2025268
- 2025254
- 2026938
- 2026232
Known exploitedNewest addition to KEV first
- CVE-2026-97229
Integer Overflow or Wraparound in GitLab
GitLab · GitLab
ExploitedCritical10.0 - CVE-2025-48595
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no…
Google · Android
ExploitedHigh8.4 - CVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,…
Apple · watchOS
ExploitedHigh8.8 - CVE-2026-21385
Integer Overflow or Wraparound in Graphics
Qualcomm, Inc. · Snapdragon
ExploitedHigh7.8 - CVE-2018-14634
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)…
The Linux Foundation · kernel
ExploitedHigh7.8 - CVE-2025-24985
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2022-0185
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the…
kernel
ExploitedHigh8.4 - CVE-2024-38080
Windows Hyper-V Elevation of Privilege Vulnerability
Microsoft · Windows Server 2022
ExploitedHigh7.8 - CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
Qualcomm, Inc. · Snapdragon
ExploitedHigh8.4 - CVE-2023-6345
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Google · Chrome
ExploitedCritical9.6
Newest CVEs
- CVE-2026-108324
Tanium addressed a denial of service vulnerability in Tanium Client.
Tanium · Tanium Client
Medium6.5 - CVE-2026-121219
Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute…
Google · Chrome
High8.3 - CVE-2026-120954
Silent element-count truncation via 32-bit bit-length overflow in packed-bit vector views
MongoDB · C Driver
Medium6.3 - CVE-2026-121382
Netcore NBR100V2 auto_ac msg_aes_dec integer overflow
Netcore · NBR100V2
High8.7 - CVE-2026-63418
Monitoring Plugins check_icmp: -H argument count overflow leads in setuid-root binary
monitoring-plugins · monitoring-plugins
High7.0 - CVE-2026-121259
Gst-plugins-bad: gst-plugins-bad: integer overflows and division by zero in jpeg 2000 decimator
Red Hat · Red Hat Enterprise Linux 10
Medium6.5 - CVE-2026-100493
An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap…
AMD · AMD Compressionator SDK
Medium6.9 - CVE-2026-40659
An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS)…
AMD · AMD Compressionator SDK
Medium5.1 - CVE-2026-58845
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional…
Google · Android
High8.4 - CVE-2026-120064
psqlODBC does not validate column numbers and row indexes in binding and descriptor functions
PostgreSQL · psqlODBC
High7.5