Common Weakness Enumeration

CWE-197

Allowed

Numeric Truncation Error

Abstraction: Base · Status: Incomplete

API response cwe.mitre.org

Truncation errors occur when a primitive is cast to a primitive of a smaller size and data is lost in the conversion.

151 vulnerabilities reference this CWE, most recent first.

GHSA-XR3J-V8QW-3594

Vulnerability from github – Published: 2026-08-11 18:31 – Updated: 2026-08-11 18:31

Details

No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally.

Severity

6.7 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-65795"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-197"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-08-11T17:18:59Z",
    "severity": "MODERATE"
  },
  "details": "No cwe for this issue in Windows DNS allows an authorized attacker to elevate privileges locally.",
  "id": "GHSA-xr3j-v8qw-3594",
  "modified": "2026-08-11T18:31:39Z",
  "published": "2026-08-11T18:31:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-65795"
    },
    {
      "type": "WEB",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65795"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Mitigation

Implementation

Ensure that no casts, implicit or explicit, take place that move from a larger size primitive or a smaller size primitive.

No CAPEC attack patterns related to this CWE.

← Back to the CWE list