diff --git a/dlls/browseui/aclmulti.c b/dlls/browseui/aclmulti.c
index bfb200c88fc..e7edece0002 100644
--- a/dlls/browseui/aclmulti.c
+++ b/dlls/browseui/aclmulti.c
@@ -100,7 +100,7 @@ static HRESULT WINAPI ACLMulti_QueryInterface(IEnumString *iface, REFIID iid, LP
 
     if (IsEqualIID(iid, &IID_IUnknown) || IsEqualIID(iid, &IID_IEnumString))
     {
-        *ppvOut = This;
+        *ppvOut = &This->IEnumString_iface;
     }
     else if (IsEqualIID(iid, &IID_IACList))
     {
diff --git a/dlls/browseui/aclsource.c b/dlls/browseui/aclsource.c
index 8b3530f9d0a..aa31d080e33 100644
--- a/dlls/browseui/aclsource.c
+++ b/dlls/browseui/aclsource.c
@@ -67,7 +67,7 @@ static HRESULT WINAPI ACLShellSource_QueryInterface(IACList2 *iface, REFIID iid,
     if (IsEqualIID(iid, &IID_IUnknown) || IsEqualIID(iid, &IID_IACList2) ||
         IsEqualIID(iid, &IID_IACList))
     {
-        *ppvOut = This;
+        *ppvOut = &This->IACList2_iface;
     }
 
     if (*ppvOut)
diff --git a/dlls/browseui/browseui_main.c b/dlls/browseui/browseui_main.c
index f509ee5914e..1b3cecc9964 100644
--- a/dlls/browseui/browseui_main.c
+++ b/dlls/browseui/browseui_main.c
@@ -152,7 +152,7 @@ static HRESULT ClassFactory_Constructor(LPFNCONSTRUCTOR ctor, LPVOID *ppvOut)
     This->IClassFactory_iface.lpVtbl = &ClassFactoryVtbl;
     This->ref = 1;
     This->ctor = ctor;
-    *ppvOut = This;
+    *ppvOut = &This->IClassFactory_iface;
     TRACE("Created class factory %p\n", This);
     InterlockedIncrement(&BROWSEUI_refCount);
     return S_OK;
diff --git a/dlls/browseui/compcatcachedaemon.c b/dlls/browseui/compcatcachedaemon.c
index a5addd233bf..5ed9f37e29d 100644
--- a/dlls/browseui/compcatcachedaemon.c
+++ b/dlls/browseui/compcatcachedaemon.c
@@ -70,7 +70,7 @@ static HRESULT WINAPI CompCatCacheDaemon_QueryInterface(IRunnableTask *iface, RE
 
     if (IsEqualIID(iid, &IID_IRunnableTask) || IsEqualIID(iid, &IID_IUnknown))
     {
-        *ppvOut = This;
+        *ppvOut = &This->IRunnableTask_iface;
     }
 
     if (*ppvOut)