Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level...
CVE-2026-88781
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an
#cwe-822
共收录 80 条相关情报。
← 返回所有主题Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to s...
CVE-2026-88781
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an
The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, checked only the device object permission and copied the call...
CVE-2026-19676
The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, chec
PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode
CVE-2026-19676
The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, chec
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
CVE-2026-110322
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferenci
The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_...
CVE-2026-19595
The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two out
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83848
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges l
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-83587
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70275
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70270
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70068
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privi
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-105723
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privil
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-103578
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical at
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-102188
Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.
CVE-2026-102186
Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information local
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
CVE-2026-100205
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer ...
CVE-2026-96393
The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affi
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a...
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank o
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-co...
CVE-2026-43598
Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank o
Memory corruption when processing draw objects of incorrect type during graphics command list execution.
CVE-2026-57545
Memory corruption when processing draw objects of incorrect type during graphics command list execution.