CVE-2025-27739

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-27739

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2025-29812

CVE-2025-29812 is described in connected sources as an Untrusted pointer dereference in Windows Kernel Memory that allows an authorized local attacker to elevate privileges. The vulnerability is associated with Windows Kernel Memory (and, per CVE listings, DirectX Graphics Kernel) and has a base ...

CVE-2025-27739

CVE-2025-27739 is a Windows Kernel elevation-of-privilege flaw described as an untrusted pointer dereference that enables a locally authenticated attacker to obtain SYSTEM privileges (CVSSv3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, base 7.8). Connected sources confirm this CVE is tracked under Win...

CVE-2025-22464

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition...

CVE-2025-22464

CVE-2025-22464 affects Ivanti Endpoint Manager prior to 2024 SU1 or prior to 2022 SU7. The issue is an untrusted pointer dereference that allows a locally authenticated attacker to write arbitrary data into memory, causing a denial-of-service. Remediation per sources: upgrade to Ivanti Endpoint M...

CVE-2025-22464

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2025-15438 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7 Description: The issue is related to an untrusted pointer dereference, allowing an attacker with local access to write arbitrary data into...

The vulnerability of Microsoft Office and 365 Apps for Enterprise packages, related to the misuse of a trusted pointer, allows an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an untrusted pointer. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

CVE-2025-24083

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Office Code Execution Vulnerability (CNVD-2025-09952)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office due to an untrusted pointer dereference...

CVE-2025-24083

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-24083

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-24084

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...

CVE-2025-24084

CVE-2025-24084 affects Windows Subsystem for Linux (WSL2) and is a kernel-level issue caused by an untrusted pointer dereference, enabling local code execution. Evidence in theInitial Description confirms local RCE potential in WSL2. Connected documents corroborate Windows context (WSL2) and prov...

CVE-2025-24083

Microsoft Office Remote Code Execution Vulnerability (CVE-2025-24083) involves an untrusted pointer dereference in Office that can allow an attacker to execute code locally. The CVSS v3.1 vector indicates a locally exploitable issue with high impact to confidentiality, integrity, and availability...

Microsoft Office 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A code execution vulnerability exists in Microsoft Office due to an untrusted pointer dereference...