CVE-2026-48340
High · 7.8CVSS
7.8
EPSS
0.3%
Published
Jul 14, 2026
CISA due date
—
The record
Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-88781 Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level… CWE-822
- CVE-2026-19676 The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in… CWE-822
- CVE-2026-110322 The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned… CWE-822
- CVE-2026-83848 Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized… CWE-822
- CVE-2026-83826 Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to… CWE-822
- CVE-2026-83587 Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to… CWE-822
- CVE-2026-70275 Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to… CWE-822
- CVE-2026-70270 Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an… CWE-822