FR
live
weakness type

CWE-197

9
vulnerabilities tracked
17 August 2026
latest publication
Most affected vendors
cve

Vulnerability watch

idvulnerabilityseveritypublished
CVE-2026-73523COVESA Open1722 through 0.9.2 contains an integer truncation vulnerability in acf-can-listener.c that allows unauthenticated remote attackers to cause the CAN listener to transmit process stack memory onto the CAN bus by sending a rejected UDP datagram with a matching AVTP stream ID. The num_can_msgs variable declared as uint8_t truncates the -1 error return value from avtp_to_can() to 255, causing a write loop to iterate 255 times over a 15-slot stack array and leak approximately 18 KB of adjacent stack memory as roughly 240 CAN frames to any recipient on the CAN bus.NVD analysis in progress High CVSS 7.5 17/08 CVE-2026-62698Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1607 High CVSS 7.8 11/08 CVE-2026-62739Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1809 High CVSS 7.8 11/08 CVE-2026-63525Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.Microsoft 365 Apps High CVSS 7.8 11/08 CVE-2026-68804Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Microsoft 365 Apps High CVSS 7.8 11/08 CVE-2026-49792Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.Microsoft Windows 10 1607 High CVSS 7.8 14/07 CVE-2026-50332Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1607 High CVSS 7.8 14/07 CVE-2026-50357Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.Microsoft Windows 10 1607 High CVSS 7.8 14/07 CVE-2026-56650Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1607 High CVSS 7.8 14/07

Type at least two characters.

navigate open esc dismiss