CVE-2026-68810

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-64910

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-62798

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62737

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-56712

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-56462

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56387

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

Microsoft Excel Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Win32k Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

Windows GDI Information Disclosure Vulnerability

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally...

Microsoft Office Remote Code Execution Vulnerability

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-8917

CVE-2026-8917 — An untrusted pointer dereference via an IOCTL affects ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll . The vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. According to the provided ...

EUVD-2026-55926

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

EUVD-2026-54295

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-7406

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-7406

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-7406

The CVE-2026-7406 entry describes an Untrusted Pointer Dereference in BMP file parsing within Autodesk products, allowing arbitrary code execution in the current process. The vulnerability arises during BMP parsing and is associated with a Local attack vector, requiring user interaction, with a H...

CVE-2026-7406 BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

EUVD-2026-53659

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.1.1 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...

CVE-2026-19023

Untrusted pointer dereference in the renderbinoutput function in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of service via a variable-length string dataset with more than one element dumped in binary mode, which corrupts the per-element stride calculation and causes...