Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

CVEs (212)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-55230 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Aug 21, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.
CVE-2025-50165 1Microsoft 2Windows 11 24h2 Windows Server 2025 Jun 17, 2026 Aug 12, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
CVE-2025-20090 1Intel 1Quickassist Technology Jun 17, 2026 Aug 12, 2025 6.8 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2025-27069 1Qualcomm 8Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSc8380xp Firmware+5 more Jun 17, 2026 Aug 6, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while processing DDI command calls.
CVE-2025-49689 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.
CVE-2025-49661 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-47985 1Microsoft 15Windows 10 1507 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
CVE-2025-47982 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Jul 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
CVE-2025-21486 1Qualcomm 31Fastconnect 6900 Firmware Fastconnect 7800 FirmwareQmp1000 Firmware+28 more Jun 17, 2026 Jun 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
CVE-2025-20018 - - Jun 17, 2026 May 13, 2025 6.9 MEDIUM· v4 8.4 HIGH· v3 N/A· v2 Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2025-30381 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 May 13, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-29812 1Microsoft 6Windows 11 22h2 Windows 11 23h2Windows 11 24h2+3 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.
CVE-2025-27747 1Microsoft 6365 Apps OfficeOffice Long Term Servicing Channel+3 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2025-27739 1Microsoft 10Windows 10 1809 Windows 10 21h2Windows 10 22h2+7 more Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-22464 1Ivanti 1Endpoint Manager Jun 17, 2026 Apr 8, 2025 N/A· v4 6.1 MEDIUM· v3 N/A· v2 An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-se...Show more An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.Show less
CVE-2025-24084 1Microsoft 6Windows 11 22h2 Windows 11 23h2Windows 11 24h2+3 more Jun 17, 2026 Mar 11, 2025 N/A· v4 8.4 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.
CVE-2025-24083 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jun 17, 2026 Mar 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2024-12576 - - Jun 17, 2026 Mar 7, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output.
CVE-2024-53034 1Qualcomm 8Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSc8380xp Firmware+5 more Jun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.
CVE-2024-53033 1Qualcomm 8Fastconnect 6900 Firmware Fastconnect 7800 FirmwareSc8380xp Firmware+5 more Jun 17, 2026 Mar 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.

Previous 1...456...11 Next