CVE-2026-96931

A vulnerability exists in Windows NTFS involving an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . Official remediation is available via a patch fro...

EUVD-2026-100252

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96933

The Windows COM+ Event System Service is vulnerable to an untrusted pointer dereference . This security flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS v3.1 score of 7.8 (High) , indicating significant impact on confidentiality, integ...

CVE-2026-96924

A critical untrusted pointer dereference vulnerability exists in Windows OLE , allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS v3.1 score of 9.8 and is categorized under CWE-822 . According to the NCSC, this vulnerability allows for ...

CVE-2026-96910

An untrusted pointer dereference vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to perform a local information disclosure attack. The vulnerability is associated with CWE-822 . No specific software versions, root cause details, or exploit ...

CVE-2026-96847

A vulnerability in WebDAV involves an untrusted pointer dereference that allows an authorized attacker to perform a local privilege elevation . The issue is associated with CWE-822 and has a CVSS 3.1 base score of 7.8 (High) . No specific affected versions, root causes, or exploit links are provi...

CVE-2026-88203

An untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network. This vulnerability has a CVSS 3.1 base score of 6.5 (Medium) and requires user interaction. Microsoft has released updates to address this and other vulnerabilit...

CVE-2026-88112

A DNS Server vulnerability exists due to an untrusted pointer dereference (CWE-822). This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . While the impact covers high levels of confidentiality, integ...

CVE-2026-88114

A vulnerability exists in the DNS Server (Windows Domain Name Service) where an untrusted pointer dereference allows an unauthorized attacker to achieve remote code execution over a network. This flaw has a CVSS v3.1 score of 8.8 (High) . While the impact includes high severity for confidentialit...

CVE-2026-88116

A DNS Server vulnerability (CVE-2026-88116) involves an untrusted pointer dereference , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is associated with Windows systems. The CVSS 3.1 score is 8.8 (High) , indicating high impact on co...

CVE-2026-70111

An untrusted pointer dereference vulnerability exists in the Windows Kernel . This flaw allows an unauthorized attacker to elevate privileges over a network. The vulnerability is associated with CWE-822 and carries a CVSS 3.1 base score of 8.1 (High) . While the vulnerability is confirmed, no spe...

CVE-2026-69902

A vulnerability exists in Windows NTFS due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local code execution . The vulnerability is associated with CWE-822 . While the CVSS score indicates a Medium severity, the potential impact includes high levels of ...

CVE-2026-88126

An untrusted pointer dereference vulnerability exists in WebDAV , which allows an authorized attacker to perform a local privilege elevation . This issue is categorized under CWE-822 . The vulnerability has a HIGH base severity score of 7.8 (CVSS 3.1). While the impact on confidentiality, integri...

CVE-2026-88079

A Null pointer dereference vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a CVSS 3.1 base score of 7.0 (High) . No specific exploit information or direct remediation steps are p...

CVE-2026-88076

A null pointer dereference vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the impact affecting confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-85903

A vulnerability exists in the Windows Domain Name Service (DNS Server) caused by an untrusted pointer dereference . This flaw allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability is rated as High severity with a CVSS score of 8.8. While exploita...

CVE-2026-83908

A Release of Invalid Pointer or Reference vulnerability exists in the RPC Runtime . This flaw allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-763 and has a CVSS 3.1 base score of 7.0 (High) . No specific software versions, root caus...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

CVE-2026-83665

A null pointer dereference vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to cause a denial of service over the network. The vulnerability is associated with CWE-476 . No specific versions, root cause files, or exploit links are provided in the docume...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...