CVE-2025-50165-x64-Exploit

CVE-2025-50165 Windows 그래픽 구성 요소 RCE x64 악성 JPEG를 통한 치명적 원격 코드 실행 – Windows 11 24H2 미패치 CVSS 9.8 – 권한 불필요, 상호작용 불필요 CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patched: November 2025 KB5040442 기능 전체 x64 null-free 셸코드 calc.exe 실행기 – 169바이트...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-103764

The Mooncake transfer engine (versions prior to 0.3.13 ) is vulnerable to an untrusted pointer dereference within the ServerSession::readHeader function. This flaw allows unauthenticated attackers to perform arbitrary memory read and write operations via the TCP transport data port . By sending a...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys 로컬 권한 상승 Windows 11 24H2 - 로컬 권한 상승 🚨 CVE-2026-21250 취약점에 대한 기술 분석 및 리소스 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 이 저장소는 Windows의 HTTP.sys 드라이버에서 로컬 권한 상승LPE을 허용하는 신뢰할 수 없는 포인터 역참조 결함인 CVE-2026-21250 취약점 연구를 위한 기술 문서와 리소스를 포함합니다. 📝 설명 이 취약점은 낮은 권한을 가진 공격자...

CVE-2024-35250

CVE-2024-35250 ks.sys 드라이버의 신뢰할 수 없는 포인터 역참조에 대한 PoC https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 감사의 말 Devcore 팀과 그들의 연구에 감사드립니다...

CVE-2026-47602

A flaw was found in nvidia-driver. A local user can cause the kernel-mode driver to dereference an untrusted pointer, which is an unverified reference to a memory location. A successful exploit can lead to a Denial of Service DoS through a system crash or result in unauthorized information...

CVE-2026-47602

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in its kernel mode driver . A local user can trigger the driver to dereference an untrusted pointer , which could result in denial of service and information disclosure . No specific patch versions or exploit details are...

CVE-2026-47602

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

EUVD-2026-90145

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

PT-2026-103450

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-47602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an...

CVE-2025-24990

CVE-2025-24990 — Windows 신뢰할 수 없는 포인터 역참조 EoP Sentinel AI Defense 의 연구 분석 자료입니다. 방어적 분석 전용 — 작동하는 익스플로잇이나 PoC는 공개되지 않습니다. 권한 있는 Windows 구성 요소가 신뢰할 수 없는 컨텍스트에서 받은 포인터를 검증 없이 역참조하여 낮은 권한의 공격자에게 임의 메모리 접근과 SYSTEM으로 가는 확실한 경로를 제공합니다. 2025년 실제 공격 환경에서 악용되었습니다. 📄 전체 분석 문서:...

HVCIPwned

CVE-2024-35250 Windows Kernel Streaming 드라이버ks.sys의 신뢰할 수 없는 포인터 역참조를 통한 로컬 권한 상승. 데이터 전용 익스플로잇 — HVCIHypervisor-protected Code Integrity를 우회합니다. 요약 항목| 설명 ---|--- CVE| CVE-2024-35250 구성 요소| ks.sys Kernel Streaming 버그 클래스| 신뢰할 수 없는 포인터 역참조 영향| NT AUTHORITY\SYSTEM으로의 권한 상승EoP HVCI| 우회됨 — 커널에서 코드 실...

CVE-2026-94403 ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-94403

ColorFul iGameCenter 1.0.3.4 contains an untrusted pointer dereference in the function sub_140001AF0 within the ene.sys driver's IOCTL Handler component. The vulnerability is exploitable locally with low complexity and low privileges, no user interaction required, and scope is changed, resulting ...

PT-2026-96223

Name of the Vulnerable Software and Affected Versions ColorFul iGameCenter version 1.0.3.4 Description A weakness exists in the IOCTL Handler component within the ene.sys library. Specifically, the sub 140001AF0 function is susceptible to untrusted pointer dereference, which occurs when a program...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-25261 Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls...

CVE-2026-25261

This vulnerability involves a memory corruption issue caused by an untrusted pointer dereference in the camera system. The flaw occurs specifically while processing rear sensor IOCTL calls . While the documents do not specify the exact affected product or version, the vulnerability could lead to ...

CVE-2026-25261 Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls...