Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer() in lib/asn1.js did not range-check the first two arcs of an OID. An application that accepted an untrusted OID string, checked or authorized that string, and then encoded it with asn1.oidToDer() could emit DER representing a different, trusted OID from the one that was checked. DER parsing is not affected. This issue is fixed in version 1.4.1.
CVE-2026-88077 is an integer overflow or wraparound vulnerability in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to elevate privileges over a network. The vulnerability affects versions from 1.0.0.0 up to but not including 154.0.4258.62. A fix is available in version 154.0.4258.62. The vulnerability has a high severity rating with a CVSS score of 8.8.
CVE-2026-111496 is a critical integer overflow vulnerability in Apache Kafka Streams affecting versions from 1.1.0 through 4.1.2, 4.2.0 through 4.2.1, and 4.3.0 through 4.3.1. The flaw occurs when the stream-time punctuation calculation overflows due to record timestamps near Long.MAX_VALUE, causing the StreamThread to stall indefinitely. This results in the affected Streams application becoming unresponsive, though brokers and the cluster remain unaffected. The issue requires write access to a source topic using stream-time punctuation and is mitigated by Kafka broker settings that reject excessively large timestamps by default in version 4.0.0 and later. The vulnerability is fixed in Apache Kafka versions 4.2.2, 4.3.2, and 4.4.0.
CVE-2026-103410 is an integer overflow vulnerability in the DPI certificate scanner of Juniper Networks Session Smart Router. This flaw allows an unauthenticated remote attacker to cause a denial of service by sending a specially crafted TLS server certificate. The vulnerability affects multiple versions of the product prior to fixed releases. A fix is available in versions 7.0.5, 7.1.7, and 7.2.3.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, including several LTS releases, contain an integer overflow or wraparound vulnerability (CWE-190). This flaw could allow a high privileged attacker with remote access to bypass protection mechanisms. The vulnerability has a high severity with a CVSS score of 7.2. Fixed versions are available starting from 7.13.1.90, 8.3.1.50, 8.6.1.30, and 8.9.0.0.
Dell PowerProtect Data Domain versions 7.7.1.0 through 8.8, including specific LTS releases, contain an integer overflow or wraparound vulnerability. This flaw could be exploited by a high privileged attacker with remote access to execute arbitrary code on the affected system. The vulnerability is tracked as CVE-2026-86389 and has a CVSS 3.1 score of 7.2, indicating high severity. Fixed versions are available starting from 8.9.0.0 and later, as well as specific later versions of LTS releases.
CVE-2026-110747 is an integer overflow vulnerability in the FasterXML jackson-dataformat-protobuf library's ProtobufParser._readStringKey() method. The flaw occurs when parsing a protobuf map entry's string key length, allowing an attacker to trigger an overflow that bypasses length checks and causes the parser to allocate an excessively large buffer. This leads to an OutOfMemoryError, which can crash the Java Virtual Machine if configured with -XX:+ExitOnOutOfMemoryError. The vulnerability affects specific versions in the 2.x and 3.x release lines where the _readStringKey() method is present.
CVE-2026-104016 is an integer overflow vulnerability in FasterXML jackson-dataformat-protobuf affecting multiple versions before fixed releases. The flaw occurs during parsing of length-prefixed protobuf string and bytes fields, where 32-bit signed integer arithmetic overflow allows bypassing bounds checks. This leads to an attempt to allocate an excessively large array, causing an OutOfMemoryError. The vulnerability does not require privileges or user interaction beyond submitting data for parsing. Existing configuration limits do not prevent this issue. Fixed versions are available.
In EPICS Base release 7.0.10 and prior, an improper validation of message length values during protocol parsing can trigger an integer overflow, resulting in an out-of-bounds memory write. Successful exploitation can cause process instability or denial of service.
In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution.
An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal allows a remote, unauthenticated attacker to write beyond the bounds of a heap buffer by sending a specially crafted request while the Access Portal feature is enabled.
An integer overflow in the remote-control
screen processing component of TeamViewer clients (Full Client, Portable and Remote
Control App) prior to version 15.83 may allow a malicious remote host to cause
a denial of service or, depending on the platform, potentially execute
arbitrary code with the privileges of the viewer process. Exploitation requires
a user to establish a remote-control session to an attacker-controlled or
compromised host.
CVE-2026-116591 is an integer overflow vulnerability in the klauspost compress library prior to version 1.20.2. The flaw occurs in the zstd DecodeAll and streaming decoder paths when processing a crafted two-block frame, leading to a panic due to an out-of-range state derived from stale decode-table data. This can cause an application crash when handling untrusted zstd input. The issue is fixed in version 1.20.2.
CVE-2026-114645 is a medium severity integer overflow vulnerability in the MongoDB C Driver affecting Windows client builds using the native Kerberos/SSPI authentication backend. It arises from a 32-bit integer wraparound that causes an undersized heap buffer allocation when an excessively long credential value is supplied in the client's connection configuration. This can lead to out-of-bounds writes, potentially corrupting client process memory and causing denial of service. The issue affects versions >=1.6.0 <1.30.14 and >=2.0.0 <2.5.7 and has been fixed in versions 1.30.14 and 2.5.7.
An out-of-bounds read and write vulnerability exists in Apache DataSketches C++ Count-Min sketch deserialization versions 4.1.0 through 5.2.0. The flaw allows reading beyond the input buffer and integer overflow during table size calculation, leading to heap memory corruption. This can cause application crashes and potentially enable further exploitation. The issue affects only applications deserializing Count-Min sketches from untrusted sources. Upgrading to version 5.3.0 resolves the vulnerability.
CVE-2026-110264 is a critical integer overflow vulnerability in GitLab CE/EE that affects multiple version ranges from 7.0 up to various fixed versions before 19.5.1. This flaw allows an unauthenticated attacker to execute arbitrary code on the GitLab server by exploiting an integer overflow triggered when compiling a specially crafted regular expression. The vulnerability has a CVSS score of 10.0, indicating maximum severity, and impacts confidentiality, integrity, and availability. Fixed versions are available across all affected release lines.
CVE-2026-96641 is an integer overflow vulnerability in the python-pillow Pillow library prior to version 13.0.0. The flaw occurs in the PILfont text-width accumulation code where negative glyph advances are not properly checked against INT_MIN, allowing a signed 16-bit advance of -32768 to cause an integer overflow. This results in a large positive width from a negative calculation, potentially causing logic errors or excessive resource consumption in applications using text layout or size calculations. The issue is fixed in Pillow version 13.0.0.
CVE-2026-105923 is a medium severity vulnerability in Qt affecting the VectorImage QML Type. A malicious SVG file can cause an integer overflow that leads to a null-pointer dereference, potentially causing application crashes or denial of service. The issue affects Qt versions from 6.8.0 up to but not including 6.8.9, and from 6.9.0 up to but not including 6.11.3. Fixed versions are 6.8.9 and 6.11.3.
Eclipse OpenJ9 versions prior to 0.63.0 contain an integer overflow vulnerability in the JITServer component. This flaw occurs when processing the initial 4-byte length field of an incoming TCP connection, causing an infinite loop that consumes full CPU on the compilation worker thread. An unauthenticated remote attacker can exploit this to exhaust the worker thread pool, resulting in a denial of service that halts compilation services for all connected JVM clients.