CWE-190: Integer overflow
3,877 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 22 of them as exploited in the wild.
- Published CVEs
- 3,877
- Last 12 months
- 1,030
- Critical
- 470
- Known exploited
- 22
Critical 470High 2,311Medium 990Low 102Not scored 4
CVEs per yearBy the year they were published
- 201515
- 201670
- 2017223
- 2018725
- 2019220
- 2020203
- 2021241
- 2022237
- 2023264
- 2024286
- 2025283
- 2026994
Known exploitedNewest addition to KEV first
- CVE-2026-97229
Integer Overflow or Wraparound in GitLab
GitLab · GitLab
ExploitedCritical10.0 - CVE-2025-48595
In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to local escalation of privilege with no…
Google · Android
ExploitedHigh8.4 - CVE-2021-30952
An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 15.2, macOS Monterey 12.1, Safari 15.2, iOS 15.2 and iPadOS 15.2,…
Apple · watchOS
ExploitedHigh8.8 - CVE-2026-21385
Integer Overflow or Wraparound in Graphics
Qualcomm, Inc. · Snapdragon
ExploitedHigh7.8 - CVE-2018-14634
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged)…
The Linux Foundation · kernel
ExploitedHigh7.8 - CVE-2025-24985
Windows Fast FAT File System Driver Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh7.8 - CVE-2022-0185
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the…
kernel
ExploitedHigh8.4 - CVE-2024-38080
Windows Hyper-V Elevation of Privilege Vulnerability
Microsoft · Windows Server 2022
ExploitedHigh7.8 - CVE-2023-33107
Integer Overflow or Wraparound in Graphics Linux
Qualcomm, Inc. · Snapdragon
ExploitedHigh8.4 - CVE-2023-6345
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a…
Google · Chrome
ExploitedCritical9.6
Newest CVEs
- CVE-2026-73472
Gstreamer1-plugins-good: gstreamer: integer overflow in avidemux superindex/subindex parsing leading to out-of-bounds read
GStreamer · gst-plugins-good
Medium6.1 - CVE-2026-116787
FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
signalwire · freeswitch
High7.5 - CVE-2026-112109
Local privilege escalation in SafeNet Authentication Client SACSrv
Thalesgroup · Safenet Authentication Client Service
High7.3 - CVE-2026-107891
musl libc before 1.2.7, when an untrusted regular expression is used with regcomp, has multiple integer overflows, possibly leading to incorrect allocation…
musl -libc · musl
High8.1 - CVE-2026-68984
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption.
Samsung Semiconductor · Exynos 2100
Not scored - CVE-2026-69005
Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
Samsung Semiconductor · Exynos 1480
Not scored - CVE-2026-122130
CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin
CESNET · ipfixcol2
High8.3 - CVE-2026-11376
IBM MQ is affected by a denial of service vulnerability
IBM · MQ
High8.8 - CVE-2026-18142
IBM MQ is affected by a denial of service vulnerability
IBM · MQ
High7.1 - CVE-2026-108324
Tanium addressed a denial of service vulnerability in Tanium Client.
Tanium · Tanium Client
Medium6.5