CVE-2026-48340 Bridge | Untrusted Pointer Dereference (CWE-822)

Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48340

Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48340

CVE-2026-48340 affects Adobe Bridge via an Untrusted Pointer Dereference in the Bridge component. The underlying issue enables arbitrary code execution in the context of the current user due to dereferencing an untrusted pointer. Exploitation requires user interaction: a victim must open a malici...

CVE-2026-56168

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-55136

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-55138

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-50673

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-50479

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-50441

Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-50424

Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network...

CVE-2026-50382

Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally...

CVE-2026-50366

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-50315

Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-48580

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

RLSA-2026:38492 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: md/bitmap: fix GPF in writepage caused by resize race CVE-2026-43163 kernel: rtmutex: Use waiter::task instead of current in removewaiter CVE-2026-43499 kernel: futex/requeue: Prevent NUL...

USN-8526-2 libheif vulnerabilities

USN-8526-1 fixed vulnerabilities in libheif. This update provides the corresponding updates for CVE-2026-47709 and CVE-2026-47714 in Ubuntu 24.04 LTS. Original advisory details: Junyi Liu discovered that libheif had a null pointer dereference in its image tiling interface. An attacker could...

USN-8526-2: libheif vulnerabilities

USN-8526-1 fixed vulnerabilities in libheif. This update provides the corresponding updates for CVE-2026-47709 and CVE-2026-47714 in Ubuntu 24.04 LTS. Original advisory details: Junyi Liu discovered that libheif had a null pointer dereference in its image tiling interface. An attacker could...

CVE-2026-10670

The CONFIGUSERSPACE verification handler for the kthreadnamecopy system call zvrfykthreadnamecopy in kernel/thread.c calls kobjectfind on the caller-supplied thread pointer and then dereferences the returned struct kobject without checking it for NULL. kobjectfind returns NULL whenever the suppli...

CVE-2026-10670 User-triggerable kernel NULL-pointer dereference (DoS) in `k_thread_name_copy()` syscall verifier

The CONFIGUSERSPACE verification handler for the kthreadnamecopy system call zvrfykthreadnamecopy in kernel/thread.c calls kobjectfind on the caller-supplied thread pointer and then dereferences the returned struct kobject without checking it for NULL. kobjectfind returns NULL whenever the suppli...

CVE-2026-10670 User-triggerable kernel NULL-pointer dereference (DoS) in `k_thread_name_copy()` syscall verifier

The CONFIGUSERSPACE verification handler for the kthreadnamecopy system call zvrfykthreadnamecopy in kernel/thread.c calls kobjectfind on the caller-supplied thread pointer and then dereferences the returned struct kobject without checking it for NULL. kobjectfind returns NULL whenever the suppli...