Category
Draft
CWE-189: Numeric Errors
Weaknesses in this category are related to improper calculation or conversion of numbers.
Last updated
1,191
Recorded CVEs
With this primary CWE
1
KEVs
In the CISA KEV catalog
10
Weaknesses
In this category
Draft
Status
Per MITRE
Weaknesses in this category
- CWE-128: Wrap-around Error
- CWE-190: Integer Overflow or Wraparound
- CWE-191: Integer Underflow (Wrap or Wraparound)
- CWE-193: Off-by-one Error
- CWE-369: Divide By Zero
- CWE-681: Incorrect Conversion between Numeric Types
- CWE-839: Numeric Range Comparison Without Minimum Check
- CWE-1335: Incorrect Bitwise Shift of Integer
- CWE-1339: Insufficient Precision or Accuracy of a Real Number
- CWE-1389: Incorrect Parsing of Numbers with Different Radices
Real-world CVEs
1,191 recorded CVEs are caused by CWE-189 (Numeric Errors), including 1 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 4 new CWE-189 CVEs have been recorded so far in 2026 (1 in 2025).
- CVE-2013-2094CISA KEVHigh · CVSS 8.6 · EPSS 99th2013-05-14
- CVE-2015-8396Critical · CVSS 10.0 · EPSS 97th2016-01-12
- CVE-2015-7205Critical · CVSS 10.0 · EPSS 88th2015-12-16
- CVE-2014-7917Critical · CVSS 10.0 · EPSS 50th2015-10-01
- CVE-2015-3836Critical · CVSS 10.0 · EPSS 87th2015-10-01
- CVE-2014-7915Critical · CVSS 10.0 · EPSS 50th2015-10-01
- CVE-2015-6575Critical · CVSS 10.0 · EPSS 86th2015-10-01
- CVE-2015-3864Critical · CVSS 10.0 · EPSS 100th2015-10-01
- CVE-2015-3829Critical · CVSS 10.0 · EPSS 100th2015-10-01
- CVE-2014-7916Critical · CVSS 10.0 · EPSS 50th2015-10-01
- CVE-2015-3834Critical · CVSS 10.0 · EPSS 69th2015-10-01
- CVE-2015-1539Critical · CVSS 10.0 · EPSS 100th2015-10-01
Showing 12 of 1,191 recorded CWE-189 CVEs. Get an alert for each new one, with AI-written analysis and fixes.
Monitor these CVEsFrequently asked questions
Common questions about CWE-189.
- What is CWE-189?
- Weaknesses in this category are related to improper calculation or conversion of numbers.
- What CVEs are caused by CWE-189?
- 1,191 recorded CVEs are attributed to CWE-189, including CVE-2013-2094, CVE-2015-8396 and CVE-2015-7205. 1 is listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
- Is CWE-189 actively exploited?
- Yes. 1 CWE-189 vulnerability is in CISA's KEV catalog of actively exploited flaws, out of 1,191 recorded CVEs.
Sources
- [1]Supplemental Details - 2022 CWE Top 25 (2022)
References
- MITRE CWE definition (CWE-189) (opens in a new tab)
- CWE-189 vulnerabilities on NVD (opens in a new tab)
- Learn: What is a CWE?
Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.