CVE-2025-24990

CVE-2025-24990 — Windows Untrusted Pointer Dereference EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. A privileged Windows component dereferences a pointer it receives from an untrusted context without validating it — giving a...

CVE-2024-35250

CVE-2024-35250 PoC for the Untrusted Pointer Dereference in the ks.sys driver https://github.com/user-attachments/assets/79e8f3e6-91d5-4145-9a78-1d36248c7284 Acknowledgements Credits to the Devcore team and their research...

CVE-2025-50165-x64-Exploit

CVE-2025-50165 Windows Graphics Component RCE x64 Critical Remote Code Execution via malicious JPEG – Windows 11 24H2 unpatched CVSS 9.8 – No privileges, no interaction required CVE-2025-50165 - windowscodecs.dll untrusted pointer dereference Discovered by Zscaler ThreatLabz Patched: November 202...

HVCIPwned

CVE-2024-35250 Local privilege escalation via untrusted pointer dereference in Windows Kernel Streaming driver ks.sys. Data-only exploit — bypasses Hypervisor-protected Code Integrity HVCI. Summary Field| Detail ---|--- CVE| CVE-2024-35250 Component| ks.sys Kernel Streaming Bug Class| Untrusted...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation Windows 11 24H2 - Local Privilege Escalation 🚨 Technical analysis and resources for vulnerability CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 This repository contains technical documentation and resources for studyin...

Security Updates for Microsoft Office Products C2R (October 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network. CVE-2026-88196, CVE-2026-88197 - Heap-based buffer overflow in Windo...

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88219: RPC Runtime Library Remote Code Execution Vulnerability

Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70111: Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-70104: Windows Win32k Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69850: Windows Certificates Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83826: Windows Error Reporting Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70172: Windows NTFS Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-118132

Уязвимость доверенной среды выполнения Virtualization-Based Security VBS Enclave операционных систем Windows связана с разыменованием недоверенного указателя. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

CVE-2026-103764

The Mooncake transfer engine (versions prior to 0.3.13 ) is vulnerable to an untrusted pointer dereference within the ServerSession::readHeader function. This flaw allows unauthenticated attackers to perform arbitrary memory read and write operations via the TCP transport data port . By sending a...

CVE-2026-103764 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

PT-2026-104057

Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size...

CVE-2026-94403 ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-94403

ColorFul iGameCenter 1.0.3.4 contains an untrusted pointer dereference in the function sub_140001AF0 within the ene.sys driver's IOCTL Handler component. The vulnerability is exploitable locally with low complexity and low privileges, no user interaction required, and scope is changed, resulting ...

CVE-2026-94403: Untrusted Pointer Dereference

A weakness has been identified in ColorFul iGameCenter 1.0.3.4. This impacts the function sub140001AF0 in the library ene.sys of the component IOCTL Handler. This manipulation causes untrusted pointer dereference. The attack can only be executed locally. The exploit has been made available to the...