Total
303 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-88203 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-15 | N/A | 6.5 MEDIUM |
| Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. | |||||
| CVE-2025-62560 | 1 Microsoft | 5 365 Apps, Excel, Office and 2 more | 2026-10-14 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2025-62561 | 1 Microsoft | 5 365 Apps, Excel, Office and 2 more | 2026-10-14 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2025-62556 | 1 Microsoft | 5 365 Apps, Excel, Office and 2 more | 2026-10-14 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | |||||
| CVE-2026-70300 | 1 Microsoft | 3 365 Apps, Office 2021, Office 2024 | 2026-10-14 | N/A | 9.8 CRITICAL |
| Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2025-59607 | 1 Qualcomm | 28 Cologne, Cologne Firmware, Fastconnect 6900 and 25 more | 2026-10-14 | N/A | 7.8 HIGH |
| Memory Corruption when copying large input data exceeds normal allocation limits. | |||||
| CVE-2026-105729 | 2026-10-13 | N/A | 7.1 HIGH | ||
| Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-100205 | 2026-10-13 | N/A | 7.1 HIGH | ||
| Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-4993 | 1 Rti | 1 Connext Professional | 2026-10-11 | N/A | 9.1 CRITICAL |
| Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.10, from 6.1.0 before 6.1.2.27, from 6.0.0 before 6.0.1.43, from 5.3.0 before 5.3.*, from 5.2.0 before 5.2.*, from 4.4a before 5.1.*. | |||||
| CVE-2025-1255 | 1 Rti | 1 Connext Professional | 2026-10-11 | N/A | 9.1 CRITICAL |
| Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.2.0 before 7.3.0.9. | |||||
| CVE-2026-96393 | 2026-10-09 | N/A | 3.6 LOW | ||
| The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an Affinity document that, when opened by a user in Affinity, could result in an application crash. | |||||
| CVE-2026-57545 | 1 Qualcomm | 434 Ar8031, Ar8031 Firmware, Cologne and 431 more | 2026-10-09 | N/A | 7.8 HIGH |
| Memory corruption when processing draw objects of incorrect type during graphics command list execution. | |||||
| CVE-2023-41139 | 1 Autodesk | 10 Autocad, Autocad Advance Steel, Autocad Architecture and 7 more | 2026-10-08 | N/A | 7.8 HIGH |
| A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process. | |||||
| CVE-2026-91795 | 2 Foxit, Microsoft | 3 Pdf Editor, Pdf Reader, Windows | 2026-10-08 | N/A | 7.8 HIGH |
| Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution. | |||||
| CVE-2025-47338 | 1 Qualcomm | 36 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 33 more | 2026-10-08 | N/A | 7.8 HIGH |
| Memory corruption while processing escape commands from userspace. | |||||
| CVE-2025-27060 | 1 Qualcomm | 50 Immersive Home 214 Platform, Immersive Home 214 Platform Firmware, Immersive Home 216 Platform and 47 more | 2026-10-08 | N/A | 8.8 HIGH |
| Memory corruption while performing SCM call with malformed inputs. | |||||
| CVE-2025-27048 | 1 Qualcomm | 36 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 33 more | 2026-10-08 | N/A | 7.8 HIGH |
| Memory corruption while processing camera platform driver IOCTL calls. | |||||
| CVE-2026-43598 | 2026-10-07 | N/A | N/A | ||
| Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code execution. | |||||
| CVE-2025-62549 | 1 Microsoft | 14 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 11 more | 2026-10-07 | N/A | 8.8 HIGH |
| Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2025-47380 | 1 Qualcomm | 28 Fastconnect 7800, Fastconnect 7800 Firmware, Qcc2072 and 25 more | 2026-10-07 | N/A | 7.8 HIGH |
| Memory corruption while preprocessing IOCTLs in sensors. | |||||