CWE-763

CWE-763 · 12 records · 4 with a public proof-of-concept

Records the NVD classes under CWE-763, highest CVSS first.

  1. HIGH 8.8CVE-2026-970112026-10-13

    Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

    365 apps · microsoft 365 · office 2021 · office 2024

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-838892026-10-13

    Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.

    windows 10 1607 · windows 10 1809 · windows 10 21h2 · windows 10 22h2 · windows 11 23h2 · windows 11 24h2

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.8CVE-2026-1008132026-09-29

    Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Thunderbird 157 and Firefox 157.

    firefox · thunderbird

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.8CVE-2026-858502026-10-13

    Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.8CVE-2026-837352026-10-13

    Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  6. HIGH 7.8CVE-2026-1081332026-10-13

    Release of invalid pointer or reference in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  7. HIGH 7.6CVE-2026-88340public PoC2026-09-22

    An invalid pointer release vulnerability exists in YARA 4.5.8 during deserialization of compiled .yrc rule files. The vulnerability is caused by insufficient validation of external-variable pointers, which may lead to invalid free in yr_rules_destroy() or wild…

    AI risk analysis on Exploit-DB.ai →

  8. HIGH 7CVE-2026-853622026-10-13

    Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  9. HIGH 7CVE-2026-839082026-10-13

    Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

    AI risk analysis on Exploit-DB.ai →

  10. MEDIUM 5.3CVE-2026-68908public PoC2026-10-16

    libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, Reporting_RCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write …

    AI risk analysis on Exploit-DB.ai →

  11. NONE 0CVE-2026-119341public PoC2026-10-30

    Tesseract is an open source OCR engine. Prior to 5.5.4, ReadAdaptedClass in src/classify/adaptive.cpp raw-reads an ADAPT_CLASS_STRUCT from a pre-adapted-template .a file without neutralizing TempProtos and Config pointer fields before any destructor path. When…

    AI risk analysis on Exploit-DB.ai →

  12. UNSCOREDCVE-2026-112893public PoC2026-10-19

    Pillow is a Python imaging library. From 10.0.0 until 13.0.0, Pillow can free an invalid glyph pointer during FreeType rendering with an active stroker. If FT_Load_Glyph fails, cleanup may call FT_Done_Glyph on an uninitialized or stale glyph variable. An atta…

    AI risk analysis on Exploit-DB.ai →