The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
501 vulnerabilities with CWE-191
CVE-2024-38050
HIGH
Windows Workstation Service - Privilege Escalation
CVSS 7.8
CVE-2024-37986
HIGH
Windows Secure Boot - Security Feature Bypass via Integer Underflow
CVSS 8.0
CVE-2024-37981
HIGH
Windows Secure Boot Security Feature Bypass via Integer Underflow
CVSS 8.0
CVE-2024-37975
HIGH
Windows Secure Boot - Security Feature Bypass via Integer Underflow
CVSS 8.0
CVE-2024-37974
HIGH
Windows 10/11, Server 2012-2022 Secure Boot Bypass via Integer Underflow
CVSS 8.0
CVE-2024-21466
MEDIUM
Qualcomm FastConnect 7800 Firmware - Information Disclosure via Sub-IE Length Parsing
CVSS 6.5
CVE-2024-6285
HIGH
Renesas arm-trusted-firmware - Memory Corruption
CVSS 7.5
CVE-2024-30070
HIGH
Windows Server 2012, 2016, 2019 DHCP Server Service Integer Underflow DoS
CVSS 7.5
CVE-2024-5256
MEDIUM
Sonos Era 100 Firmware - Unauthenticated Integer Underflow in SMB2 Message Handling
CVSS 4.3
CVE-2024-32975
MEDIUM
envoyproxy/envoy < 1.27.6 - Denial of Service via Integer Underflow in QuicStreamSequencerBuffer
CVSS 5.9
CVE-2024-35980
MEDIUM
Linux Kernel - Integer Overflow in TLBI RANGE Operand
CVSS 5.5
CVE-2024-30011
MEDIUM
Windows Server 2012, 2016, 2019, 2022 Hyper-V Integer Underflow DoS
CVSS 6.5
CVE-2024-30008
MEDIUM
Windows DWM Core Library - Info Disclosure
CVSS 5.5
CVE-2024-32040
HIGH
FreeRDP <3.5.0-2.11.6 - Integer Underflow
CVSS 8.1
CVE-2024-26913
HIGH
Linux Kernel - Integer Underflow in DRM AMD Display ODM Calculation
CVSS 7.8
CVE-2024-26828
MEDIUM
Linux Kernel 4.18-6.1.78, 6.2-6.6.17, 6.7-6.7.5 - Integer Underflow in CIFS Server Interface Parser
CVSS 6.7
CVE-2024-28945
HIGH
Microsoft OLE DB Driver for SQL Server 18.0.2-18.7.0002.0 - Remote Code Execution
CVSS 8.8
CVE-2024-28933
HIGH
Microsoft ODBC Driver for SQL Server 17.0.1.1-17.10.6.1 - Remote Code Execution
CVSS 8.8
CVE-2024-28930
HIGH
Microsoft ODBC Driver for SQL Server 17.0.1.1-17.10.6.1 - Remote Code Execution
CVSS 8.8
CVE-2024-26244
HIGH
Windows 10 1507-23H2 and Windows 11 21H2-23H2 - Remote Code Execution via WDAC OLE DB Provider
CVSS 8.8
CVE-2024-26208
HIGH
Windows 10 1507-22H2, Windows 11 21H2-23H2, Windows Server 2008-2012 - Remote Code Execution via MSMQ Integer Underflow
CVSS 7.2
CVE-2024-3077
MEDIUM
Zephyr < 3.6.0 - Denial of Service via Malformed BLE GATT Packet
CVSS 6.8
CVE-2024-24474
HIGH
qemu < 8.2.0 - Integer Underflow and Buffer Overflow via TI Command in ESP DMA Transfer
CVSS 8.8
CVE-2024-23313
CRITICAL
libbiosig 2.5.0 and Master Branch - Integer Underflow in sopen_FAMOS_read
CVSS 9.8
CVE-2024-0808
CRITICAL
Google Chrome <121.0.6167.85 - Heap Corruption
CVSS 9.8
Details
Vulnerabilities
501