738 matches found
CVE-2025-50165-x64-Exploit
CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG ā Windows 11 24H2 unpatched CVSS 9.8 ā No privileges, no interaction required root@kitploit: CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patche...
CVE-2026-21250
CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation Windows 11 24H2 - Local Privilege Escalation šØ Technical analysis and resources for vulnerability CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 This repository contains technical documentation and resources for studyin...
CVE-2024-35250
CVE-2024-35250 PoC for the Untrusted Pointer Dereference in the ks.sys driver https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 Acknowledgements Credits to the Devcore team and their research...
CVE-2025-24990
CVE-2025-24990 ā Windows Untrusted Pointer Dereference EoP Research writeup by Sentinel AI Defense. Defensive analysis only ā no working exploit or PoC is published here. A privileged Windows component dereferences a pointer it receives from an untrusted context without validating it ā giving a...
CVE-2026-10420
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be...
CVE-2026-82927
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...
CVE-2026-10420
Samsung mTower , an open-source project, is affected by an untrusted pointer dereference vulnerability that allows pointer manipulation. The issue exists in all versions before commit 102d3dc75cf8e58e68e4bea54ae3c803992c91be. The associated CVSS 3.1 score is 5.5 (Medium) with a local attack vecto...
EUVD-2026-69020
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be...
CVE-2026-82927
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 06994e303637512e39062f3e037c222e8448e57e...
HVCIPwned
CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit ā bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...
CVE-2026-81579
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81579 An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
EUVD-2026-66984
In WibuKey for Windows before version 6.71, an untrusted pointer dereference in the WibuKey264.sys kernel driver for 64-bit Windows allows an attacker to exploit a write-what-where primitive, enabling local privilege escalation. This can be leveraged to execute arbitrary code, run an administrato...
CVE-2026-81579
WibuKey for Windows (versions before 6.71 ) is affected by an untrusted pointer dereference in the WibuKey2_64.sys kernel driver (64-bit Windows), which exposes a write-what-where primitive. This enables a local unprivileged user to escalate privileges, potentially executing arbitrary code, spawn...
PT-2026-82480
Name of the Vulnerable Software and Affected Versions WibuKey for Windows versions prior to 6.71 Description An untrusted pointer dereference in the WibuKey2 64.sys kernel driver for 64-bit Windows allows a local attacker to exploit a write-what-where primitive. This primitive enables local...
CVE-2026-68810
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-64910
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-62798
Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...