Total
244 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-67378 | 1 Microsoft | 3 Sql Server 2019, Sql Server 2022, Sql Server 2025 | 2026-09-16 | N/A | 8.5 HIGH |
| Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-69475 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 10 more | 2026-09-14 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69501 | 1 Microsoft | 8 Windows 10 21h2, Windows 10 22h2, Windows 11 23h2 and 5 more | 2026-09-14 | N/A | 7.0 HIGH |
| Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-33964 | 2026-09-14 | N/A | 6.4 MEDIUM | ||
| An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera driver, causing limited information disclosure or denial of service. | |||||
| CVE-2026-90890 | 2026-09-14 | N/A | 5.5 MEDIUM | ||
| ASRock Polychrome SYNC/RGB software utility developed by ASRock Inc. has an Untrusted Pointer Dereference vulnerability. Authenticated local attackers can send a specially crafted IOCTL request to cause the driver to dereference an unvalidated pointer, resulting in an operating system crash. | |||||
| CVE-2026-78444 | 1 Microsoft | 4 Windows 10 1809, Windows Server 2019, Windows Server 2022 and 1 more | 2026-09-11 | N/A | 8.1 HIGH |
| Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2026-78451 | 1 Microsoft | 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more | 2026-09-11 | N/A | 6.8 MEDIUM |
| Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack. | |||||
| CVE-2026-80083 | 1 Microsoft | 6 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 3 more | 2026-09-10 | N/A | 8.8 HIGH |
| Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally. | |||||
| CVE-2026-83498 | 1 Microsoft | 5 Windows 11 23h2, Windows 11 24h2, Windows 11 25h2 and 2 more | 2026-09-10 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-83939 | 1 Microsoft | 1 Windows 11 26h1 | 2026-09-10 | N/A | 8.2 HIGH |
| Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-72956 | 1 Microsoft | 4 365 Apps, Office 2019, Office 2021 and 1 more | 2026-09-10 | N/A | 6.5 MEDIUM |
| Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-72938 | 1 Microsoft | 5 365 Apps, Microsoft 365, Office 2019 and 2 more | 2026-09-09 | N/A | 6.5 MEDIUM |
| Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2026-69900 | 2026-09-09 | N/A | 7.8 HIGH | ||
| Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69874 | 2026-09-09 | N/A | 8.2 HIGH | ||
| Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-69717 | 2026-09-09 | N/A | 8.0 HIGH | ||
| Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. | |||||
| CVE-2026-69569 | 2026-09-08 | N/A | 5.7 MEDIUM | ||
| Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network. | |||||
| CVE-2026-7406 | 1 Autodesk | 12 Advance Steel, Autocad, Autocad Architecture and 9 more | 2026-09-04 | N/A | 7.8 HIGH |
| A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. | |||||
| CVE-2026-45198 | 2026-09-03 | N/A | 7.8 HIGH | ||
| Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control (Firmware) uses a pointer from non-secure memory belonging to the Rich Execution Environment (REE) when saving or retrieving internal data between the tightly coupled private memory to main memory. An attacker with control over the REE kernel may modify the pointer value, corrupting the data used by the GPU Firmware. | |||||
| CVE-2026-8917 | 2026-09-03 | N/A | N/A | ||
| Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin ' section on the ASUS Security Advisory for more information. | |||||
| CVE-2026-10420 | 2026-09-01 | N/A | 5.5 MEDIUM | ||
| Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be. | |||||