CVE-2026-18840
High · 8.2CVSS
8.2
EPSS
—
Published
Aug 20, 2026
CISA due date
—
The record
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to improper validation of an attacker-controlled pointer.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-83939 Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker… CWE-822
- CVE-2026-83498 Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave… CWE-822
- CVE-2026-80083 Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute… CWE-822
- CVE-2026-78451 Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an… CWE-822
- CVE-2026-78444 Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker… CWE-822
- CVE-2026-72956 Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized… CWE-822
- CVE-2026-10420 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822
- CVE-2026-82927 Untrusted pointer dereference vulnerability in Samsung Open Source mTower allows Pointer… CWE-822