PULSEUnderground Intel

LIVE37signals / 24h

FEED

ransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomiah6477 reclama a hilmar-cheese · US · Agriculture and Food Productionransomn0n reclama a Company #70 · EG · Not Foundransomn0n reclama a Company #73 · Not Foundransomincransom reclama a fairfeelegalservices.com · US · Professional Servicesransomincransom reclama a verveba.com \ www.att.com · US · Technologyransomincransom reclama a www.coopecaja.fi.cr · CR · Financial Servicesransomincransom reclama a nowaszkola.com · PL · Educationransomqilin reclama a Keio Corporation · JP · Transportationransomqilin reclama a Kemlows Diecasting Products Limited · GB · Manufacturingransomqilin reclama a Telcoe Federal Credit Union · US · Financial Servicesransomwallstreet reclama a TGM Manufacturing, Inc · US · Manufacturingransomqilin reclama a Segres Systec · ES · Technologyransomqilin reclama a Shield Wall Systems of Florida · US · Government & Defenseransomqilin reclama a The Excalibur Group · US · Otherransomiah6477 reclama a hilmar-cheese · US · Agriculture and Food Productionransomn0n reclama a Company #70 · EG · Not Foundransomn0n reclama a Company #73 · Not Found

CVE WatchOct 15, 2026

CVE-2026-108435

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVSS

6.5

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 15, 2026 · Last modified: Oct 15, 2026 · CWE-822

EPSS · 30d

Not enough EPSS history yet.

Technical description

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-108435

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-969337.8 HIG

——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.2d CVE-2026-969317.8 HIG

——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.2d CVE-2026-969249.8 CRI

——18Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.2d CVE-2026-969105.5 MED

——10Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.2d CVE-2026-968477.8 HIG

——7Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.2d CVE-2026-962167.0 HIG

——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.2d