CWE-191 整数下溢(超界折返) 类弱点 307 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-191 整数下溢漏洞发生于程序执行减法操作时，结果低于整数类型允许的最小值，导致数值回绕至最大值附近，产生非预期结果。攻击者常利用此缺陷绕过安全检查或引发逻辑错误，进而可能导致缓冲区溢出等更严重的安全问题。开发者应通过添加边界检查、使用更大范围的整数类型或启用编译器的溢出检测功能，确保算术运算在合法范围内，从而有效防止此类漏洞发生。
#include <stdio.h> #include <stdbool.h> main (void) { int i; i = -2147483648; i = i - 1; return 0; }int a = 5, b = 6; size_t len = a - b; char buf[len]; // Just blows up the stack }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-54890 | erlang/otp 输入验证错误漏洞 — OTP | 8.2 | High | 2026-07-27 |
| CVE-2026-66033 | libssh2 缓冲区错误漏洞 — libssh2 | 7.5 | High | 2026-07-24 |
| CVE-2026-48296 | Adobe CAI Content Credentials 数字错误漏洞 — Content Credentials Rust SDK | 6.2 | Medium | 2026-07-14 |
| CVE-2026-48298 | Adobe Content Credentials Rust SDK 数字错误漏洞 — Content Credentials Rust SDK | 6.2 | Medium | 2026-07-14 |
| CVE-2026-55039 | Microsoft Office Excel 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise | 7.8 | High | 2026-07-14 |
| CVE-2026-50300 | Microsoft Windows Kernel 缓冲区错误漏洞 — Windows 10 Version 1607 | 5.5 | Medium | 2026-07-14 |
| CVE-2026-50308 | Microsoft Windows NTFS 缓冲区错误漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-07-14 |
| CVE-2026-49790 | Microsoft Windows Universal Disk Format File System Driver 缓冲区错误漏洞 — Windows 10 Version 1607 | 7.3 | High | 2026-07-14 |
| CVE-2026-49181 | Microsoft Windows DHCP Client 数字错误漏洞 — Windows 10 Version 1607 | 7.5 | High | 2026-07-14 |
| CVE-2026-55011 | Microsoft Malware Protection Engine 数字错误漏洞 — Microsoft Malware Protection Engine | 7.8 | High | 2026-07-14 |
| CVE-2026-54982 | Microsoft Reliable Multicast Transport Driver 数字错误漏洞 — Windows 10 Version 1607 | 8.8 | High | 2026-07-14 |
| CVE-2026-29008 | U-Boot 数字错误漏洞 — u-boot | 7.5 | High | 2026-07-08 |
| CVE-2026-55490 | OpenWrt 数字错误漏洞 — openwrt | 6.5 | Medium | 2026-07-07 |
| CVE-2026-58016 | GNOME GLib 数字错误漏洞 — GLib | 7.5 | High | 2026-06-30 |
| CVE-2026-58058 | nmap 数字错误漏洞 — Nmap | 6.5 | Medium | 2026-06-28 |
| CVE-2026-57918 | Ronnie Sahlberg libnfs 数字错误漏洞 — libnfs | 7.1 | High | 2026-06-26 |
| CVE-2026-6678 | wolfSSL 数字错误漏洞 — wolfSSL | - | - | 2026-06-25 |
| CVE-2026-30803 | RTI Connext Micro 数字错误漏洞 — Connext Micro | - | - | 2026-06-17 |
| CVE-2026-54413 | driftregion iso14229 缓冲区错误漏洞 — iso14229 | 8.2 | High | 2026-06-14 |
| CVE-2026-11850 | MIT krb5 数字错误漏洞 — Red Hat Hardened Images | 5.0 | Medium | 2026-06-11 |
| CVE-2026-42542 | TDengine 数字错误漏洞 — TDengine | 7.5 | High | 2026-06-10 |
| CVE-2026-42981 | Microsoft Windows 数字错误漏洞 — Windows 11 version 23H2 | 8.1 | High | 2026-06-09 |
| CVE-2026-42980 | Microsoft Windows NT OS Kernel 安全漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-06-09 |
| CVE-2026-45463 | Microsoft Office 安全漏洞 — Microsoft 365 Apps for Enterprise | 8.4 | High | 2026-06-09 |
| CVE-2026-45469 | Microsoft Office Excel 安全漏洞 — Microsoft 365 Apps for Enterprise | 7.8 | High | 2026-06-09 |
| CVE-2026-11789 | 389 Directory Server 数字错误漏洞 — Red Hat Directory Server 11 | 4.9 | Medium | 2026-06-09 |
| CVE-2026-49494 | Comodo Internet Security 数字错误漏洞 — Comodo Internet Security | 7.5 | High | 2026-06-07 |
| CVE-2026-50593 | Graphite-Web 数字错误漏洞 — Graphite | 7.3 | High | 2026-06-05 |
| CVE-2026-25104 | MediaInfoLib 安全漏洞 — MediaInfoLib | 7.8 | High | 2026-05-26 |
| CVE-2026-44069 | Netatalk 数字错误漏洞 — Netatalk | 3.4 | Low | 2026-05-21 |
CWE-191（整数下溢(超界折返)） 是常见的弱点类别，本平台收录该类弱点关联的 307 条 CVE 漏洞。