Vulnerabilities (CVE)

Filtered by CWE-822
Total 244 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-27739 1 Microsoft 10 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 7 more 2026-06-17 N/A 7.8 HIGH
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-27710 1 Intel 1 Quickassist Technology 2026-06-17 N/A 6.5 MEDIUM
Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
CVE-2025-27069 1 Qualcomm 16 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 13 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while processing DDI command calls.
CVE-2025-27060 1 Qualcomm 50 Immersive Home 214 Platform, Immersive Home 214 Platform Firmware, Immersive Home 216 Platform and 47 more 2026-06-17 N/A 8.8 HIGH
Memory corruption while performing SCM call with malformed inputs.
CVE-2025-27048 1 Qualcomm 36 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 33 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while processing camera platform driver IOCTL calls.
CVE-2025-24990 1 Microsoft 16 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 13 more 2026-06-17 N/A 7.8 HIGH
Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
CVE-2025-24084 1 Microsoft 6 Windows 11 22h2, Windows 11 23h2, Windows 11 24h2 and 3 more 2026-06-17 N/A 8.4 HIGH
Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.
CVE-2025-24083 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.8 HIGH
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2025-22464 1 Ivanti 1 Endpoint Manager 2026-06-17 N/A 6.1 MEDIUM
An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.
CVE-2025-21486 1 Qualcomm 62 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 59 more 2026-06-17 N/A 7.8 HIGH
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
CVE-2025-21381 1 Microsoft 5 365 Apps, Excel, Office and 2 more 2026-06-17 N/A 7.8 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-21363 1 Microsoft 2 365 Apps, Office Long Term Servicing Channel 2026-06-17 N/A 7.8 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVE-2025-21358 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2026-06-17 N/A 7.8 HIGH
Windows Core Messaging Elevation of Privileges Vulnerability
CVE-2025-21354 1 Microsoft 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more 2026-06-17 N/A 8.4 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVE-2025-20090 1 Intel 1 Quickassist Technology 2026-06-17 N/A 5.5 MEDIUM
Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2025-20018 2026-06-17 N/A 8.4 HIGH
Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2025-1255 1 Rti 1 Connext Professional 2026-06-17 N/A 9.1 CRITICAL
Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.2.0 before 7.3.0.9.
CVE-2024-53034 1 Qualcomm 16 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 13 more 2026-06-17 N/A 7.8 HIGH
Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
CVE-2024-53033 1 Qualcomm 16 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 13 more 2026-06-17 N/A 7.8 HIGH
Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.
CVE-2024-49090 1 Microsoft 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more 2026-06-17 N/A 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability