CVE-2026-111309

Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

EUVD-2026-122578

Release of invalid pointer or reference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-111309

Release of invalid pointer or reference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-105560

Release of invalid pointer or reference in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-96175

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-96097

Release of invalid pointer or reference in Windows Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-88234

Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network...

EUVD-2026-121497

Release of invalid pointer or reference in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-121714

Release of invalid pointer or reference in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Windows iSCSI Remote Code Execution Vulnerability

Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-83908

A Release of Invalid Pointer or Reference vulnerability exists in the RPC Runtime . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-763 and has a CVSS 3.1 base score of 7.0 (High) . No specific software versions, root caus...

EUVD-2026-99973

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112652

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An authorized attacker can execute arbitrary code over a network due to the release of an invalid pointer or reference. This issue allows remote attackers to affect the system...

CVE-2026-85362: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Release of Invalid Pointer or Reference

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Siemens SIMATIC S7-1500 CPU 1518 MFP Release of Invalid Pointer or Reference (CVE-2026-46116)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505964; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2026-15718: Release of Invalid Pointer or Reference

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13...

CVE-2026-57248: Release of Invalid Pointer or Reference

When the application opens a PDF file and JavaScript writes annotation attributes, there is a lack of sufficient object type and argument checks. As a result, due to the damage to the internal structure of the annotations, it causes the application to crash during subsequent release...

CVE-2026-47312

Release of invalid pointer or reference vulnerability in Samsung Open Source Escargot allows Buffer Manipulation. This issue affects Escargot: 590345cc6258317c5da850d846ce6baaf2afc2d3...

CVE-2025-48768: Release of Invalid Pointer or Reference

Release of Invalid Pointer or Reference vulnerability was discovered in fs/inode/fsinoderemove code of the Apache NuttX RTOS that allowed root filesystem inode removal leading to a debug assert trigger that is disabled by default, NULL pointer dereference handled differently depending on the targ...