CVE-2026-68810

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-64910

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62798

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62737

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56712

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-68810

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56462

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56387

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows GDI Information Disclosure Vulnerability

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

CVE-2026-8917

CVE-2026-8917 — An untrusted pointer dereference via an IOCTL affects ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll . The vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. According to the provided ...

EUVD-2026-55926

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

PT-2026-70547

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An untrusted pointer dereference in Windows Win32K allows an authorized attacker to locally disclose sensitive information, which may impact the system. Recommendations At the moment,...

PT-2026-70638

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70431

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a new...

EUVD-2026-54295

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-7406

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-7406 BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...