CVE-2026-108435 | Medium | 6.5 | 2026-10-15 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network. |
CVE-2026-96933 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-96931 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-96924 | Critical | 9.8 | 2026-10-13 | Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network. |
CVE-2026-96910 | Medium | 5.5 | 2026-10-13 | Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally. |
CVE-2026-96847 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-96216 | High | 7.0 | 2026-10-13 | Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-88219 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network. |
CVE-2026-88203 | Medium | 6.5 | 2026-10-13 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-88126 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. |
CVE-2026-88116 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-88114 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-88112 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-88098 | High | 7.0 | 2026-10-13 | Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally. |
CVE-2026-85909 | Medium | 5.5 | 2026-10-13 | Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally. |
CVE-2026-85903 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-83848 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83826 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
CVE-2026-83587 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
CVE-2026-70300 | Critical | 9.8 | 2026-10-13 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-70275 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. |
CVE-2026-70270 | Medium | 5.5 | 2026-10-13 | Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-70172 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
CVE-2026-70170 | Medium | 6.5 | 2026-10-13 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. |
CVE-2026-70167 | High | 8.8 | 2026-10-13 | Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. |
CVE-2026-70111 | High | 8.1 | 2026-10-13 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-70104 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
CVE-2026-70068 | High | 8.8 | 2026-10-13 | Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-69902 | Medium | 6.7 | 2026-10-13 | Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. |
CVE-2026-69850 | High | 7.8 | 2026-10-13 | Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
CVE-2026-108471 | High | 8.8 | 2026-10-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-105729 | High | 7.1 | 2026-10-13 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |
CVE-2026-105723 | High | 7.5 | 2026-10-13 | Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-103578 | Medium | 6.8 | 2026-10-13 | Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-102188 | Medium | 6.8 | 2026-10-13 | Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-102186 | Medium | 4.7 | 2026-10-13 | Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. |
CVE-2026-100205 | High | 7.1 | 2026-10-13 | Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |
CVE-2026-96393 | Low | 3.6 | 2026-10-09 | The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-… |
CVE-2026-43598 | | | 2026-10-06 | Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to derefere… |
CVE-2026-57545 | High | 7.8 | 2026-10-06 | Memory corruption when processing draw objects of incorrect type during graphics command list execution. |
CVE-2026-19185 | High | 7.8 | 2026-10-05 | The system-call verifier for i3c_do_ccc() in drivers/i3c/i3c_handlers.c validated the outer struct i3c_ccc_payload, the broadcast ccc.data buffer and the targe… |
CVE-2026-97876 | Medium | 6.4 | 2026-10-02 | A local attacker with control over GRUB's configuration can bypass lockdown restrictions when booting with Secure Boot and load an unsigned GRUB module, while… |
CVE-2026-103764 | Critical | 9.8 | 2026-10-02 | Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and… |
CVE-2026-102757 | | | 2026-09-29 | An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that t… |
CVE-2026-102710 | | | 2026-09-29 | Attacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with `TX_ENABLE… |
CVE-2026-102709 | | | 2026-09-29 | Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secur… |
CVE-2026-58007 | High | 8.1 | 2026-09-24 | Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
… |
CVE-2026-58006 | High | 8.1 | 2026-09-24 | Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS allows Exploitation of Improperly Configured or Implemented Memory Protections.
… |
CVE-2026-91795 | High | 7.8 | 2026-09-23 | Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal… |
CVE-2026-75432 | Medium | 5.1 | 2026-09-22 | An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent(), and Scanner::PushIndentTo()… |
CVE-2026-94403 | High | 8.8 | 2026-09-21 | A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub_140001AF0 in the library ene.sys of the component IOCTL Handler… |
CVE-2026-25261 | Medium | 6.7 | 2026-09-17 | Memory corruption while processing rear sensor IOCTL calls. |
CVE-2025-59607 | High | 7.8 | 2026-09-17 | Memory Corruption when copying large input data exceeds normal allocation limits. |
CVE-2026-90890 | Medium | 5.5 | 2026-09-14 | ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send… |
CVE-2026-33964 | Medium | 6.4 | 2026-09-14 | An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to… |
CVE-2026-83939 | High | 8.2 | 2026-09-08 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-83498 | High | 7.8 | 2026-09-08 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-80083 | High | 8.8 | 2026-09-08 | Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. |
CVE-2026-78451 | Medium | 6.8 | 2026-09-08 | Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. |
CVE-2026-78444 | High | 8.1 | 2026-09-08 | Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. |
CVE-2026-72956 | Medium | 6.5 | 2026-09-08 | Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. |
CVE-2026-72938 | Medium | 6.5 | 2026-09-08 | Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a net… |
CVE-2026-69900 | High | 7.8 | 2026-09-08 | Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-69874 | High | 8.2 | 2026-09-08 | Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. |
CVE-2026-69717 | High | 8.0 | 2026-09-08 | Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. |
CVE-2026-69569 | Medium | 5.7 | 2026-09-08 | Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network. |
CVE-2026-69501 | High | 7.0 | 2026-09-08 | Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. |
CVE-2026-69475 | High | 7.8 | 2026-09-08 | Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. |
CVE-2026-67378 | Critical | 9.0 | 2026-09-08 | Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network. |
CVE-2026-10420 | Medium | 5.5 | 2026-09-01 | Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.
This issue affects mTower: before 102d3dc75cf8e58e68e4b… |
CVE-2026-82927 | Medium | 5.5 | 2026-09-01 | Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.
This issue affects mTower: before 06994e303637512e39062… |
CVE-2026-19442 | High | 8.2 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 has a pointer validation flaw exists in the AIX Virtual SCSI (vSCSI) initiator driver. Successful exploitation ma… |
CVE-2026-18840 | High | 8.2 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled point… |
CVE-2026-9771 | High | 8.8 | 2026-08-17 | The flash_copy() system call is verified by z_vrfy_flash_copy() in drivers/flash/flash_util.c. On builds with CONFIG_USERSPACE enabled, this handler is the ker… |
CVE-2026-12364 | High | 8.4 | 2026-08-14 | The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through: it forwarded the caller-supplied sour… |
CVE-2026-68810 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-64910 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62798 | Medium | 5.5 | 2026-08-11 | Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62737 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61360 | Medium | 5.5 | 2026-08-11 | Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally. |
CVE-2026-8917 | | | 2026-08-11 | Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific valu… |
CVE-2026-45198 | High | 7.8 | 2026-08-07 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from… |
CVE-2026-7406 | High | 7.8 | 2026-08-06 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can l… |
CVE-2026-19023 | | | 2026-08-05 | Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a var… |
CVE-2026-24083 | High | 7.8 | 2026-08-04 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. |
CVE-2026-15029 | | | 2026-07-15 | Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to per… |
CVE-2026-48340 | High | 7.8 | 2026-07-14 | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… |
CVE-2026-55138 | Medium | 5.5 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-55136 | High | 7.8 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-50479 | High | 7.8 | 2026-07-14 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50441 | High | 7.8 | 2026-07-14 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50424 | High | 7.5 | 2026-07-14 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network. |
CVE-2026-50382 | High | 8.8 | 2026-07-14 | Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. |
CVE-2026-50367 | High | 7.8 | 2026-07-14 | Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-48580 | Medium | 5.5 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-58596 | High | 8.3 | 2026-07-12 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-48137 | Critical | 9.1 | 2026-06-19 | There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory de… |
CVE-2026-45645 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45643 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-45471 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |