Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

CVEs (242)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-47325 1Qualcomm 44Csr8811 Firmware Ipq8070 FirmwareIpq8070a Firmware+41 more Jun 17, 2026 Dec 18, 2025 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Information disclosure while processing system calls with invalid parameters.
CVE-2025-62561 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62560 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62556 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Dec 9, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-62549 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 Dec 9, 2025 N/A· v4 8.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.
CVE-2025-62200 1Microsoft 5365 Apps ExcelOffice+2 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2025-60728 1Microsoft 2365 Apps Office Long Term Servicing Channel Jun 17, 2026 Nov 11, 2025 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2025-60719 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2025-60713 1Microsoft 5Windows Server 2016 Windows Server 2019Windows Server 2022+2 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
CVE-2025-60708 1Microsoft 12Windows 10 1607 Windows 10 1809Windows 10 21h2+9 more Jun 17, 2026 Nov 11, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.
CVE-2025-60703 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 more Jun 17, 2026 Nov 11, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.
CVE-2025-32446 1Intel 1Quickassist Technology Jun 17, 2026 Nov 11, 2025 6.8 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated use...Show more Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.Show less
CVE-2025-27710 1Intel 1Quickassist Technology Jun 17, 2026 Nov 11, 2025 6.8 MEDIUM· v4 5.5 MEDIUM· v3 N/A· v2 Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combin...Show more Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.Show less
CVE-2025-54331 1Samsung 1Exynos 1380 Firmware Jun 17, 2026 Nov 4, 2025 N/A· v4 5.3 MEDIUM· v3 N/A· v2 An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.
CVE-2025-59207 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 Oct 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-59187 1Microsoft 16Windows 10 1507 Windows 10 1607Windows 10 1809+13 more Jun 17, 2026 Oct 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2025-55696 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 Oct 14, 2025 N/A· v4 7.0 HIGH· v3 N/A· v2 Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally.
CVE-2025-55681 1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 more Jun 17, 2026 Oct 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.
CVE-2025-55677 1Microsoft 3Windows 11 24h2 Windows 11 25h2Windows Server 2025 Jun 17, 2026 Oct 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.
CVE-2025-24990 1Microsoft 16Windows 10 1507 Windows 10 1607Windows 10 1809+13 more Jun 17, 2026 Oct 14, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The drive...Show more Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.Show less

Previous 1...456...13 Next