PULSE
FEED
ransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransomplay reclama a NY Snacks · US · Retail & E-Commerceransomplay reclama a BROTHERS EXPRESS LLC · US · Transportationransomplay reclama a Signworx · GB · Otherransomsilentransomgroup reclama a A&O Shearman · GB · Professional Servicesransomsilentransomgroup reclama a J...ransomhyflock reclama a tcadarwin · AU · Otherransombyod reclama a Providence · Healthcareransombyod reclama a Toyota · JP · Manufacturingransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technology
← All CVEs
CVE WatchNov 10, 2026

CVE-2026-63018

Integer underflow (wrap or wraparound) for some Intel(R) Metrics Discovery Application Programming Interface software before version 1.16.18

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-191

EPSS · 30d

Not enough EPSS history yet.

Technical description

Integer underflow (wrap or wraparound) for some Intel(R) Metrics Discovery Application Programming Interface software before version 1.16.189 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-960789.8 CRI
—
——0Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.4h
CVE-2026-960527.8 HIG
—
——0Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to elevate privileges locally.5h
CVE-2026-960108.8 HIG
—
——0Integer underflow (wrap or wraparound) in HID Parser Library allows an authorized attacker to elevate privileges over a network.5h
CVE-2026-959968.8 HIG
—
——0Integer underflow (wrap or wraparound) in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges over a network.5h
CVE-2026-1233948.8 HIG
—
——0Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.5h
CVE-2026-1233758.8 HIG
—
——0Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.5h