CWE-822
- 9
- vulnérabilités suivies
- 15 juillet 2026
- dernière publication
cve
Veille des vulnérabilités
identifiantvulnérabilitésévéritépublié
CVE-2026-15029Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information. Élevée CVSS 8.4 CVE-2026-48340Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.Adobe Bridge Élevée CVSS 7.8 CVE-2026-50367Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1809 Élevée CVSS 7.8 CVE-2026-50382Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.Microsoft Windows 10 1809 Élevée CVSS 8.8 CVE-2026-50424Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.Microsoft Windows 11 24h2 Élevée CVSS 7.5 CVE-2026-50441Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1607 Élevée CVSS 7.8 CVE-2026-50479Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.Microsoft Windows 10 1809 Élevée CVSS 7.8 CVE-2026-55136Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.Microsoft 365 Apps Élevée CVSS 7.8 CVE-2026-58596Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.Microsoft Edge Chromium Élevée CVSS 8.3