Total
157 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2023-29360 | 1 Microsoft | 9 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 6 more | 2025-10-28 | N/A | 8.4 HIGH |
| Microsoft Streaming Service Elevation of Privilege Vulnerability | |||||
| CVE-2025-55677 | 1 Microsoft | 3 Windows 11 24h2, Windows 11 25h2, Windows Server 2025 | 2025-10-24 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-55681 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2025-10-24 | N/A | 7.0 HIGH |
| Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-27060 | 1 Qualcomm | 50 Immersive Home 214 Platform, Immersive Home 214 Platform Firmware, Immersive Home 216 Platform and 47 more | 2025-10-21 | N/A | 8.8 HIGH |
| Memory corruption while performing SCM call with malformed inputs. | |||||
| CVE-2025-59207 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2025-10-17 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-53801 | 1 Microsoft | 11 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 8 more | 2025-10-02 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-1255 | 1 Rti | 1 Connext Professional | 2025-10-02 | N/A | 9.1 CRITICAL |
| Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.2.0 before 7.3.0.9. | |||||
| CVE-2025-4993 | 1 Rti | 1 Connext Professional | 2025-10-01 | N/A | 9.1 CRITICAL |
| Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.10, from 6.1.0 before 6.1.2.27, from 6.0.0 before 6.0.*, from 5.3.0 before 5.3.*, from 4.4a before 5.2.*. | |||||
| CVE-2025-55230 | 1 Microsoft | 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more | 2025-09-30 | N/A | 7.8 HIGH |
| Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2025-58749 | 1 Bytecodealliance | 1 Webassembly Micro Runtime | 2025-09-20 | N/A | 5.3 MEDIUM |
| WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand (memory address pointer) is greater than or equal to 2147483648 bytes (2GiB). This causes the runtime to hang in release builds or crash in debug builds due to accessing an invalid pointer. The issue does not occur in FAST-JIT mode or other runtime tools. This has been fixed in version 2.4.2. | |||||
| CVE-2025-54905 | 1 Microsoft | 6 365 Apps, Office, Office Long Term Servicing Channel and 3 more | 2025-09-12 | N/A | 7.1 HIGH |
| Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally. | |||||
| CVE-2024-36352 | 2025-09-08 | N/A | 8.4 HIGH | ||
| Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service. | |||||
| CVE-2024-23136 | 1 Autodesk | 9 Advance Steel, Autocad, Autocad Architecture and 6 more | 2025-08-26 | N/A | 7.8 HIGH |
| A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process. | |||||
| CVE-2025-21354 | 1 Microsoft | 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more | 2025-08-25 | N/A | 8.4 HIGH |
| Microsoft Excel Remote Code Execution Vulnerability | |||||
| CVE-2025-21486 | 1 Qualcomm | 62 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 59 more | 2025-08-20 | N/A | 7.8 HIGH |
| Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. | |||||
| CVE-2025-27069 | 1 Qualcomm | 16 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 13 more | 2025-08-18 | N/A | 7.8 HIGH |
| Memory corruption while processing DDI command calls. | |||||
| CVE-2025-50165 | 1 Microsoft | 2 Windows 11 24h2, Windows Server 2025 | 2025-08-14 | N/A | 9.8 CRITICAL |
| Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. | |||||
| CVE-2025-20090 | 2025-08-13 | N/A | 5.5 MEDIUM | ||
| Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access. | |||||
| CVE-2024-21455 | 1 Qualcomm | 40 Qam8295p, Qam8295p Firmware, Qca6584au and 37 more | 2025-08-11 | N/A | 7.8 HIGH |
| Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver. | |||||
| CVE-2024-33038 | 1 Qualcomm | 90 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 87 more | 2025-08-11 | N/A | 7.8 HIGH |
| Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. | |||||