CVE-2025-50165-x64-Exploit

CVE-2025-50165 Componente de Gráficos de Windows RCE x64 Ejecución remota de código crítica mediante JPEG malicioso – Windows 11 24H2 sin parche CVSS 9.8 – Sin privilegios, sin interacción requerida CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys 本地权限提升 Windows 11 24H2 - 本地权限提升 🚨 CVE-2026-21250 漏洞的技术分析与资源 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 本仓库包含 CVE-2026-21250 漏洞的技术文档与资源，该漏洞是 Windows HTTP.sys 驱动程序中不可信指针解引用（Untrusted Pointer Dereference）缺陷，可导致本地权限提升（LPE）。 📝 描述 该漏洞允许具有低权限且可本地访问系统的攻击者，利用 HTTP.s...

CVE-2024-35250

CVE-2024-35250 ks.sys ドライバーにおける信頼されないポインターの逆参照の PoC https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 謝辞 Devcore チームとその研究に感謝します。...

CVE-2026-47602

A flaw was found in nvidia-driver. A local user can cause the kernel-mode driver to dereference an untrusted pointer, which is an unverified reference to a memory location. A successful exploit can lead to a Denial of Service DoS through a system crash or result in unauthorized information...

CVE-2026-47602

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in its kernel mode driver . A local user can trigger the driver to dereference an untrusted pointer , which could result in denial of service and information disclosure . No specific patch versions or exploit details are...

EUVD-2026-90145

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

CVE-2026-47602

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

PT-2026-103450

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an untrusted pointer. A successful exploit of this vulnerability might lead to denial of service and information disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-47602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode driver where a local user can cause the driver to dereference an...

CVE-2025-24990

CVE-2025-24990 — Windows の信頼されていないポインタの参照外し EoP Sentinel AI Defense による調査レポート。防御的分析のみ — 動作するエクスプロイト や PoC はここでは公開されていません。 特権のある Windows コンポーネントが、信頼されていないコンテキストから受け取ったポインタを検証せずに 参照外しします。これにより、低特権の攻撃者は任意のメモリアクセスと SYSTEM への確実な経路を 得られます。2025 年に実際の攻撃で悪用されました。 📄 詳細記事:...

HVCIPwned

CVE-2024-35250 Windows Kernel Streaming ドライバー ks.sys における信頼されないポインタの逆参照によるローカル権限昇格。 データのみのエクスプロイト — ハイパーバイザーで保護されたコード整合性 HVCI をバイパスします。 概要 項目| 詳細 ---|--- CVE| CVE-2024-35250 コンポーネント| ks.sys Kernel Streaming バグ種別| 信頼されないポインタの逆参照 影響| NT AUTHORITY\SYSTEM への権限昇格 EoP HVCI| 回避 — カーネル内でのコード実行なし パッチ|...

CVE-2026-94403 ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-94403

ColorFul iGameCenter 1.0.3.4 contains an untrusted pointer dereference in the function sub_140001AF0 within the ene.sys driver's IOCTL Handler component. The vulnerability is exploitable locally with low complexity and low privileges, no user interaction required, and scope is changed, resulting ...

PT-2026-96223

Name of the Vulnerable Software and Affected Versions ColorFul iGameCenter version 1.0.3.4 Description A weakness exists in the IOCTL Handler component within the ene.sys library. Specifically, the sub 140001AF0 function is susceptible to untrusted pointer dereference, which occurs when a program...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-25261 Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls...

CVE-2026-25261

This vulnerability involves a memory corruption issue caused by an untrusted pointer dereference in the camera system. The flaw occurs specifically while processing rear sensor IOCTL calls . While the documents do not specify the exact affected product or version, the vulnerability could lead to ...

CVE-2026-25261 Untrusted Pointer Dereference in Camera

Memory corruption while processing rear sensor IOCTL calls...

CVE-2025-59607

CVE-2025-59607 is an Untrusted Pointer Dereference vulnerability in Qualcomm Windows Compute , where memory corruption occurs when copying large input data that exceeds normal allocation limits. The flaw is rated HIGH (CVSS 7.8) with a local attack vector, low complexity, and low privileges requi...