CVE-2026-108471

Windows Virtualization-Based Security (VBS) Enclave is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high severity base score of 8.8 , with significant impacts ...

CVE-2026-108133

A release of invalid pointer or reference vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-763 and carries a High base severity score of 7.8. No specific expl...

CVE-2026-103578

A vulnerability in the Windows Kernel involves an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation via a physical attack . No specific component or file is identified, and no exploit details or specific remediation versions are prov...

CVE-2026-102188

The Windows Storage Port Driver is vulnerable to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve privilege elevation through a physical attack . While the CVSS v3.1 score indicates a base severity of Medium (6.8) , the impact includes high confiden...

CVE-2026-102186

The Windows Network File System is susceptible to an untrusted pointer dereference vulnerability (CWE-822). This flaw allows an authorized attacker to perform a local information disclosure . The vulnerability has a CVSS 3.1 base score of 4.7 (Medium) , characterized by high attack complexity and...

CVE-2026-88219

A vulnerability in the RPC Runtime involves an untrusted pointer dereference , which could allow an unauthorized attacker to execute code over a network . The issue is associated with CWE-822 and has a CVSS v3.1 base score of 8.8 (High) . While the vulnerability allows for remote code execution, ...

EUVD-2026-100317

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

EUVD-2026-100326

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

CVE-2026-105729

An untrusted pointer dereference vulnerability exists in SysInternals , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-822 . While the CVSS score indicates a high severity impact on integrity and availability, specific d...

CVE-2026-100205

An untrusted pointer dereference vulnerability in SysInternals allows an authorized attacker to achieve local privilege escalation . This vulnerability is associated with CWE-822 and has been assigned a CVSS 3.1 base score of 7.1 (High) . No specific exploit details or in-the-wild exploitation in...

CVE-2026-96953

A null pointer dereference vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local code execution . The vulnerability has a CVSS 3.1 base score of 7.8, categorized as HIGH severity, with significant impacts on ...

EUVD-2026-100275

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

EUVD-2026-100257

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96931

A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...

EUVD-2026-100252

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

CVE-2026-96924

A critical untrusted pointer dereference vulnerability exists in Windows OLE , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 and is categorized under CWE-822 . According to the NCSC, this vulnerability allows for ...

CVE-2026-96910

An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...

CVE-2026-96847

A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...

CVE-2026-88203

An untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This vulnerability has a CVSS 3.1 base score of 6.5 (Medium) and requires user interaction. Microsoft has released updates to address this and other vulnerabilit...