CVE-2026-69744

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69717

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69587

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69569

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-69501

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69475

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69384

Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...

CVE-2026-67378

Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-62762

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

EUVD-2026-73921

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-83498

CVE-2026-83498 affects the Windows Virtualization-Based Security (VBS) Enclave and is caused by an untrusted pointer dereference , allowing an authorized local attacker with low privileges to escalate privileges without user interaction. The vulnerability carries a CVSS 3.1 score of 7.8 (HIGH) wi...

EUVD-2026-73885

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-83939

Windows Secure Kernel Mode is affected by an untrusted pointer dereference vulnerability that allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 8.2 (HIGH) , with a changed scope and high impact to confidentiality, integrity, and availability. The attack...

CVE-2026-84392

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...

CVE-2026-78451

CVE-2026-78451 is an untrusted pointer dereference in the Microsoft Windows SCSI Class System File that enables an unauthorized attacker to escalate privileges via a physical attack vector (CVSS AV:P). The vulnerability carries a CVSS 3.1 base score of 6.8 (Medium) with high impact to confidentia...

EUVD-2026-73804

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-78444

CVE-2026-78444 is an untrusted pointer dereference vulnerability in Windows Failover Cluster that allows an unauthorized, network-based attacker to achieve remote code execution . The attack requires high complexity but no prior privileges or user interaction, with high impact to confidentiality,...

EUVD-2026-73800

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

EUVD-2026-73790

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77901

A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...