CWE-190: Integer Overflow vulnerabilities

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.

Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.

Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.

Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.

Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.

Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack.

Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2) before rank-filter size validation and ImagingExpand() computes output dimensions with unchecked signed int arithmetic. This issue is fixed in version 12.3.0.