CVE-2026-108435
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVSS
6.5
Medio
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 15 oct 2026 · Última mod.: 15 oct 2026 · CWE-822
Sin historial EPSS suficiente todavía.
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-969337.8 ALT23.1%
——7Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.2dCVE-2026-969317.8 ALT23.1%
——7Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.2dCVE-2026-969249.8 CRÍ58.7%
——18Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.2dCVE-2026-969105.5 MED32.2%
——10Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.2dCVE-2026-968477.8 ALT23.1%
——7Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.2dCVE-2026-962167.0 ALT15.5%
——5Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.2d