CVE-2026-10420
Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation. This issue affects mTower: before 102d3dc75cf8e58e68e4bea54ae3c803992c91be.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.5
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- EPSS probability
- 0.11%
- CWE
- CWE-822
- Published
- 2026-09-01
- Last modified
- 2026-09-01
Affected products
- Samsung Open Source mTower
Weakness type
Related vulnerabilities
- CVE-2026-83498 — Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
- CVE-2026-83939 — Windows Secure Kernel Mode Elevation of Privilege Vulnerability
- CVE-2026-78451 — Microsoft Windows SCSI Class System File Elevation of Privilege Vulnerability
- CVE-2026-78444 — Microsoft Failover Cluster Remote Code Execution Vulnerability
- CVE-2026-72938 — Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-72956 — Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-69874 — Windows ALPC Elevation of Privilege Vulnerability
- CVE-2026-69900 — Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability