diff --git a/dlls/itss/itss.c b/dlls/itss/itss.c
index fe28ba93533..f47a0e96e7c 100644
--- a/dlls/itss/itss.c
+++ b/dlls/itss/itss.c
@@ -84,7 +84,7 @@ ITSSCF_QueryInterface(LPCLASSFACTORY iface,REFIID riid,LPVOID *ppobj)
         IsEqualGUID(riid, &IID_IClassFactory))
     {
 	IClassFactory_AddRef(iface);
-	*ppobj = This;
+	*ppobj = &This->IClassFactory_iface;
 	return S_OK;
     }
 
diff --git a/dlls/itss/storage.c b/dlls/itss/storage.c
index 60e452df239..f20c5bc0bed 100644
--- a/dlls/itss/storage.c
+++ b/dlls/itss/storage.c
@@ -106,7 +106,7 @@ static HRESULT WINAPI ITSS_IEnumSTATSTG_QueryInterface(
 	|| IsEqualGUID(riid, &IID_IEnumSTATSTG))
     {
 	IEnumSTATSTG_AddRef(iface);
-	*ppvObject = This;
+	*ppvObject = &This->IEnumSTATSTG_iface;
 	return S_OK;
     }
 
@@ -283,7 +283,7 @@ static HRESULT WINAPI ITSS_IStorageImpl_QueryInterface(
 	|| IsEqualGUID(riid, &IID_IStorage))
     {
 	IStorage_AddRef(iface);
-	*ppvObject = This;
+	*ppvObject = &This->IStorage_iface;
 	return S_OK;
     }
 
@@ -666,7 +666,7 @@ static HRESULT WINAPI ITSS_IStream_QueryInterface(
 	|| IsEqualGUID(riid, &IID_IStream))
     {
 	IStream_AddRef(iface);
-	*ppvObject = This;
+	*ppvObject = &This->IStream_iface;
 	return S_OK;
     }