CWE-822: Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 more Gdb: gdbserver: heap disclosure and wild pointer in gdb_parse_agent_expr via untrusted agent-expression length 8.2 High
- espressif esp-idf ESF-IDF: Unvalidated Stack Pointer at the ESP-TEE Privilege-Switch Boundary 9.3 Critical
- zephyrproject zephyr Inverted memory-permission check in the RTIO syscall verifier allows a user-mode thread to read and write arbitrary kernel memory 7.8 High
- zephyrproject zephyr Unvalidated user pointers in RTIO syscall verifiers allow a user-mode thread to write kernel memory 8.8 High
- eclipse foundation threadx Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode 7.0 High
- asus motherboards firmware Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level... 6.8 Medium
- zephyrproject zephyr PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode 7.8 High
- hms networks pcan windows can device drivers, peak-system device driver setup +1 more HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference 6.8 Medium
- zephyrproject zephyr Zephyr RTIO syscall verifier validates output parameters for read instead of write access 6.1 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 more Microsoft Office Word Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1809, windows server 2019, windows server 2019 (server core installation) +1 more +3 more Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability 8.8 High
- microsoft windows 11 version 26h1, windows 11 26h1 +1 more Windows Kernel Elevation of Privilege Vulnerability 6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Storage Port Driver Elevation of Privilege Vulnerability 6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Network File System Information Disclosure Vulnerability 4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more RPC Runtime Library Remote Code Execution Vulnerability 8.8 High
- microsoft windows sysinternals process monitor SysInternals Elevation of Privilege Vulnerability 7.1 High
- microsoft windows sysinternals process monitor SysInternals Elevation of Privilege Vulnerability 7.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows NTFS Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows COM+ Event System Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows OLE Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Microsoft Windows Search Component Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more WebDAV Elevation of Privilege Vulnerability 7.8 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office PowerPoint Information Disclosure Vulnerability 6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Domain Name Service Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Domain Name Service Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 more Windows Domain Name Service Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Kernel Elevation of Privilege Vulnerability 8.1 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows NTFS Remote Code Execution Vulnerability 6.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more WebDAV Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Domain Name Service Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Core Messaging Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows Kernel Elevation of Privilege Vulnerability 7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2021 +3 more +5 more Microsoft Office Word Remote Code Execution Vulnerability 9.8 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Security Support Provider Interface Elevation of Privilege Vulnerability 7.0 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 more Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability 5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows NTFS Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Kernel Denial of Service Vulnerability 6.5 Medium
- microsoft windows server 2022, windows server 2025, windows server 2025 (server core installation) +2 more Windows Domain Name Service Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows CD-ROM File System Driver Remote Code Execution Vulnerability 8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows COM+ Event System Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +9 more +11 more Windows Error Reporting Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 more Windows Win32k Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 more Windows Certificates Elevation of Privilege Vulnerability 7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Windows Distributed File System (DFS) Elevation of Privilege Vulnerability 7.5 High
- canva affinity The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds... 3.6 Low
- amd instinct™ mi210, instinct™ mi250, instinct™ mi250x +6 more +8 more Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a... 7.7 High
- qualcomm ar8031 firmware, cologne firmware, congo firmware +215 more +217 more Untrusted Pointer Dereference in Graphics 7.8 High
- zephyrproject zephyr Unvalidated user-supplied buffer pointers in the I3C do_ccc system call handler allow kernel memory read/write from user mode 7.8 High
- Show olderLoading…