Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

CVEs (212)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-20940 1Microsoft 10Windows 10 1607 Windows 10 1809Windows 10 21h2+7 more Jun 17, 2026 Jan 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20938 1Microsoft 3Windows 11 23h2 Windows 11 24h2Windows 11 25h2 Jun 17, 2026 Jan 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
CVE-2026-20935 1Microsoft 3Windows 11 23h2 Windows 11 24h2Windows 11 25h2 Jun 17, 2026 Jan 13, 2026 N/A· v4 6.2 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
CVE-2026-20857 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Jun 17, 2026 Jan 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-20819 1Microsoft 3Windows 11 23h2 Windows 11 24h2Windows 11 25h2 Jun 17, 2026 Jan 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
CVE-2026-20811 1Microsoft 6Windows 11 23h2 Windows 11 24h2Windows 11 25h2+3 more Jun 17, 2026 Jan 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
CVE-2025-47380 1Qualcomm 14Fastconnect 7800 Firmware Qcc2072 FirmwareWcd9378c Firmware+11 more Jun 17, 2026 Jan 7, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while preprocessing IOCTLs in sensors.
CVE-2025-47343 1Qualcomm 25Cologne Firmware Fastconnect 6700 FirmwareFastconnect 6900 Firmware+22 more Jun 17, 2026 Jan 7, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing a video session to set video parameters.
CVE-2025-52516 1Samsung 6Exynos 1330 Firmware Exynos 1380 FirmwareExynos 1480 Firmware+3 more Jun 17, 2026 Jan 5, 2026 N/A· v4 6.2 MEDIUM· v3 N/A· v2 An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of...Show more An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service.Show less
CVE-2025-47387 1Qualcomm 45Aqt1000 Firmware Fastconnect 6200 FirmwareFastconnect 6700 Firmware+42 more Jun 17, 2026 Dec 18, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory Corruption when processing IOCTLs for JPEG data without verification.
CVE-2025-47325 1Qualcomm 44Csr8811 Firmware Ipq8070 FirmwareIpq8070a Firmware+41 more Jun 17, 2026 Dec 18, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while processing system calls with invalid parameters.
CVE-2025-62561 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62560 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62556 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62549 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 Dec 9, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-62200 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-60728 1Microsoft 2365 Apps Office Long Term Servicing Channel Jun 17, 2026 Nov 11, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2025-60719 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-60713 1Microsoft 5Windows Server 2016 Windows Server 2019Windows Server 2022+2 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2025-60708 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Nov 11, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

Previous 1 234 5...11 Next