CVE-2026-12364 | High | 8.4 | 2026-08-14 | The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through: it forwarded the caller-supplied sour… |
CVE-2026-68810 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-64910 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-62798 | Medium | 5.5 | 2026-08-11 | Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally. |
CVE-2026-62737 | High | 7.8 | 2026-08-11 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-61360 | Medium | 5.5 | 2026-08-11 | Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally. |
CVE-2026-8917 | | | 2026-08-11 | Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific valu… |
CVE-2026-45198 | High | 7.8 | 2026-08-07 | Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from… |
CVE-2026-7406 | High | 7.8 | 2026-08-06 | A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can l… |
CVE-2026-19023 | | | 2026-08-05 | Untrusted pointer dereference in the render_bin_output function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a var… |
CVE-2026-24083 | High | 7.8 | 2026-08-04 | Memory Corruption while processing IOCTL device driver requests with invalid arguments. |
CVE-2026-15029 | | | 2026-07-15 | Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to per… |
CVE-2026-48340 | High | 7.8 | 2026-07-14 | Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploita… |
CVE-2026-55138 | Medium | 5.5 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-55136 | High | 7.8 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-50479 | High | 7.8 | 2026-07-14 | Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-50441 | High | 7.8 | 2026-07-14 | Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
CVE-2026-50424 | High | 7.5 | 2026-07-14 | Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network. |
CVE-2026-50382 | High | 8.8 | 2026-07-14 | Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. |
CVE-2026-50367 | High | 7.8 | 2026-07-14 | Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-48580 | Medium | 5.5 | 2026-07-14 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
CVE-2026-58596 | High | 8.3 | 2026-07-12 | Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. |
CVE-2026-48137 | Critical | 9.1 | 2026-06-19 | There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory de… |
CVE-2026-45645 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-45643 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-45471 | High | 7.8 | 2026-06-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-44805 | Medium | 5.5 | 2026-06-09 | Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally. |
CVE-2026-8835 | High | 7.3 | 2026-05-26 | IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vu… |
CVE-2025-62627 | | | 2026-05-13 | An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located… |
CVE-2026-40369 | High | 7.8 | 2026-05-12 | Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-40367 | High | 8.4 | 2026-05-12 | Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-20738 | | | 2026-05-12 | Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation… |
CVE-2025-47408 | High | 7.8 | 2026-05-04 | Memory corruption when another driver calls an IOCTL with invalid input/output buffer. |
CVE-2025-47405 | High | 7.8 | 2026-05-04 | Memory corruption when processing camera sensor input/output control codes with invalid output buffers. |
CVE-2026-33120 | High | 8.8 | 2026-04-14 | Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. |
CVE-2026-33114 | High | 8.4 | 2026-04-14 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-32222 | High | 7.8 | 2026-04-14 | Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2026-32077 | High | 7.8 | 2026-04-14 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
CVE-2026-27920 | High | 7.8 | 2026-04-14 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
CVE-2026-27919 | High | 7.8 | 2026-04-14 | Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally. |
CVE-2026-26161 | High | 7.8 | 2026-04-14 | Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-23670 | Medium | 5.7 | 2026-04-14 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally. |
CVE-2026-26113 | High | 8.4 | 2026-03-10 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2026-26112 | High | 7.8 | 2026-03-10 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2021-26410 | | | 2026-02-10 | Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing a… |
CVE-2026-21250 | High | 7.8 | 2026-02-10 | Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2026-21232 | High | 7.8 | 2026-02-10 | Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. |
CVE-2025-59959 | Medium | 5.5 | 2026-01-15 | An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authentic… |
CVE-2026-20956 | High | 7.8 | 2026-01-13 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-20955 | High | 7.8 | 2026-01-13 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2026-20948 | High | 7.8 | 2026-01-13 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2026-20940 | High | 7.8 | 2026-01-13 | Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-20938 | High | 7.8 | 2026-01-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. |
CVE-2026-20935 | Medium | 6.2 | 2026-01-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally. |
CVE-2026-20857 | High | 7.8 | 2026-01-13 | Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. |
CVE-2026-20819 | Medium | 5.5 | 2026-01-13 | Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally. |
CVE-2026-20811 | High | 7.8 | 2026-01-13 | Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. |
CVE-2025-47380 | High | 7.8 | 2026-01-07 | Memory corruption while preprocessing IOCTLs in sensors. |
CVE-2025-47343 | High | 7.8 | 2026-01-07 | Memory corruption while processing a video session to set video parameters. |
CVE-2025-52516 | Medium | 6.2 | 2026-01-05 | An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address d… |
CVE-2025-47387 | High | 7.8 | 2025-12-18 | Memory Corruption when processing IOCTLs for JPEG data without verification. |
CVE-2025-47325 | Medium | 6.5 | 2025-12-18 | Information disclosure while processing system calls with invalid parameters. |
CVE-2025-62561 | High | 7.8 | 2025-12-09 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-62560 | High | 7.8 | 2025-12-09 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-62556 | High | 7.8 | 2025-12-09 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-62549 | High | 8.8 | 2025-12-09 | Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. |
CVE-2025-62200 | High | 7.8 | 2025-11-11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-60728 | Medium | 4.3 | 2025-11-11 | Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network. |
CVE-2025-60719 | High | 7.0 | 2025-11-11 | Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-60713 | High | 7.8 | 2025-11-11 | Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally. |
CVE-2025-60708 | Medium | 6.5 | 2025-11-11 | Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally. |
CVE-2025-60703 | High | 7.8 | 2025-11-11 | Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
CVE-2025-32446 | Medium | 6.5 | 2025-11-11 | Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of p… |
CVE-2025-27710 | Medium | 6.5 | 2025-11-11 | Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure… |
CVE-2025-54331 | Medium | 5.3 | 2025-11-04 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_… |
CVE-2025-59207 | High | 7.8 | 2025-10-14 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-59187 | High | 7.8 | 2025-10-14 | Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-55696 | High | 7.8 | 2025-10-14 | Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally. |
CVE-2025-55681 | High | 7.0 | 2025-10-14 | Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2025-55677 | High | 7.8 | 2025-10-14 | Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
CVE-2025-24990 | High | 7.8 | 2025-10-14 | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcem… |
CVE-2025-47338 | High | 7.8 | 2025-10-09 | Memory corruption while processing escape commands from userspace. |
CVE-2025-27060 | High | 8.8 | 2025-10-09 | Memory corruption while performing SCM call with malformed inputs. |
CVE-2025-27048 | High | 7.8 | 2025-10-09 | Memory corruption while processing camera platform driver IOCTL calls. |
CVE-2025-4993 | Critical | 9.1 | 2025-09-23 | Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.This issue affects Connext Professional: f… |
CVE-2025-1255 | Critical | 9.1 | 2025-09-23 | Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.This issue affects Connext Professional: f… |
CVE-2025-58749 | Medium | 5.3 | 2025-09-16 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the ru… |
CVE-2025-54905 | High | 7.1 | 2025-09-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2025-54114 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized… |
CVE-2025-53801 | High | 7.8 | 2025-09-09 | Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2024-36352 | High | 8.4 | 2025-09-06 | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or… |
CVE-2025-55230 | High | 7.8 | 2025-08-21 | Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-50165 | Critical | 9.8 | 2025-08-12 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2025-20090 | Medium | 5.5 | 2025-08-12 | Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable deni… |
CVE-2025-27069 | High | 7.8 | 2025-08-06 | Memory corruption while processing DDI command calls. |
CVE-2025-49689 | High | 7.8 | 2025-07-08 | Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-49661 | High | 7.8 | 2025-07-08 | Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-47985 | High | 7.8 | 2025-07-08 | Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
CVE-2025-47982 | High | 7.8 | 2025-07-08 | Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-21486 | High | 7.8 | 2025-06-03 | Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. |