CWE-191: Integer Underflow vulnerabilities

CVE-2026-48503 is an integer underflow vulnerability in the MMS file service of libIEC61850 versions prior to 1.6.2. The flaw allows an unauthenticated remote client to cause an out-of-range initialPosition in fileOpen, leading to an oversized response that can disclose stale data from previous responses. This can result in information disclosure without authentication. The issue is fixed in version 1.6.2.

CVE-2026-73252 is an integer underflow vulnerability in the cesanta mongoose embedded web server's built-in TLS stack prior to version 7.23. The flaw allows a malicious TLS peer to send a specially crafted TLS 1.3 record that triggers a heap out-of-bounds read before certificate or Finished validation, causing a remote denial of service. This occurs because the length calculation underflows, leading to processing of stale buffer contents as trusted data. The issue is fixed in version 7.23.

CVE-2026-106464 is a high-severity vulnerability in Eclipse ThreadX NetX Duo up to version 6.5.2.202603. The NetX Secure X.509 parser improperly handles certificates with an empty BIT STRING signature, causing it to record an invalid signature length (0xFFFFFFFF). This leads to an out-of-bounds read during TLS handshake signature verification, potentially causing a fault.

CVE-2026-101968 is an integer underflow vulnerability in the rpd process of Juniper Networks Junos OS affecting EX Series, MX Series, and Junos OS Evolved on ACX Series platforms that support draft Rosen MVPN. An unauthenticated adjacent attacker can exploit this flaw via a malformed Rosen-MVPN message to cause heap memory disclosure and multicast join-state injection. The vulnerability has a medium severity with a CVSS score of 5.4. Multiple specific Junos OS versions are affected. No explicit patch or remediation status is provided in the available data.

CVE-2026-101938 is an integer underflow vulnerability in the srxpfe component of Juniper Networks Junos OS and Junos OS Evolved on SRX Series devices. This flaw allows an adjacent unauthenticated attacker to cause a denial of service on the forwarding plane by sending a crafted ICMP message related to an SVR carrier session. The vulnerability has a medium severity with a CVSS score of 6.5 and does not impact confidentiality or integrity but affects availability.

CVE-2026-101980 is a critical integer underflow vulnerability in the kernel of Juniper Networks Junos OS when Extended Echo is configured. An unauthenticated attacker can exploit this vulnerability remotely to cause a denial of service by crashing the kernel. The vulnerability affects multiple versions of Junos OS prior to specific patch releases. The CVSS score is 9.8, indicating a high impact on confidentiality, integrity, and availability.

CVE-2026-50216 is an integer underflow vulnerability in the DNS proxy component of the macOS NetworkExtension system extension used by Akamai Guardicore Platform Agent (GPA). When a UDP datagram shorter than 96 bytes with a specific initial value is processed, a size calculation underflows, leading to an allocation failure and an uncaught Objective-C exception that aborts the root system extension. This results in a denial of service condition. The vulnerability affects GPA versions from 0 up to but not including 7.4. A patch is available to address this issue.

CVE-2026-102192 is an integer underflow vulnerability in the Windows Failover Cluster component of Microsoft Windows Server 2019. This flaw allows an unauthorized attacker to cause a denial of service (DoS) over a network. The vulnerability affects multiple builds of Windows Server 2019 prior to specific fixed versions. A patch addressing this issue is officially available from Microsoft.

CVE-2026-100222 is a critical heap-based buffer overflow vulnerability in the Network Policy Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthenticated attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed builds. Microsoft has released official patches to address this issue.

CVE-2026-97004 is a heap-based buffer overflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability has a high severity with a CVSS score of 8.8. Microsoft has released official fixes in multiple versions to address this issue.

CVE-2026-97746 is a high-severity integer underflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to specific fixed releases. Microsoft has issued official fixes for this vulnerability.

CVE-2026-96925 is an integer underflow vulnerability in the Windows NTFS component affecting multiple versions of Microsoft Windows 10, including Version 1607. This flaw allows an authorized local attacker to disclose information due to improper handling of integer values. The vulnerability has a medium severity rating with a CVSS score of 5.5. Microsoft has released official fixes for all affected versions.

CVE-2026-96844 is an integer underflow vulnerability in the Microsoft Bluetooth Driver on Windows 10 Version 1607 and other specified versions. This flaw allows an authorized attacker to elevate privileges over an adjacent network. The vulnerability has a high severity score and has been officially fixed in multiple Windows 10 builds.

CVE-2026-88195 is a buffer over-read vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has been assigned a CVSS v3.1 score of 6.5, indicating a medium severity level. Official patches addressing this issue are available in versions 16.0.14334.20974 and 16.0.17932.21056. The vendor manages remediation for this cloud-hosted service. No known exploits are reported in the wild.

CVE-2026-83676 is an integer underflow vulnerability in the Windows Installer component of Microsoft Windows 10 Version 21H2. This flaw allows an authorized local attacker to elevate privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 7. A fix has been officially released by Microsoft for multiple affected Windows 10 builds.

CVE-2026-97739 is a high-severity integer underflow vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise. This flaw allows an unauthorized attacker to execute code remotely over a network. The vulnerability is identified as CWE-191 (Integer Underflow). Official fixes have been released in multiple versions of the product.

CVE-2026-88143 is a heap-based buffer overflow vulnerability in the Windows Storage Spaces Controller component of Microsoft Windows 10 Version 1607 and later builds. This flaw allows an authorized local attacker with high privileges to elevate their privileges further on the affected system. The vulnerability has been assigned a CVSS v3.1 score of 6.7, indicating a medium severity level. Microsoft has released official fixes for all affected versions.

CVE-2026-85806 is a critical integer underflow vulnerability in the Network Policy Server (NPS) component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. Microsoft has released official patches to address this issue.

CVE-2026-85339 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related builds involving an integer underflow in the Routing and Remote Access Service (RRAS). This flaw allows remote attackers to execute code on affected systems, potentially gaining unauthorized access. Multiple Windows 10 versions prior to specific fixed builds are impacted. An official fix is available from Microsoft.

CVE-2026-83869 is a critical integer underflow vulnerability in the DNS Server component of Microsoft Windows 10 Version 1607 and related builds. This flaw allows an unauthorized attacker to execute arbitrary code remotely over a network. The vulnerability affects multiple Windows 10 versions prior to specific fixed releases. Microsoft has issued official fixes for all affected versions.