CWE-822: Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
A kind of CWE-119 Buffer Overflow.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability8.8 High
- microsoft excel, office, 365 apps +7 more +9 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2016, windows server 2016 (server core installation), windows server 2019 +6 more +8 moreWindows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.0 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +2 more +4 moreMicrosoft Excel Information Disclosure Vulnerability4.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreStorvsp.sys Driver Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +30 more +32 moreWindows Remote Desktop Services Elevation of Privilege Vulnerability7.8 High
- intel quickassist technologyUntrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0...6.8 Medium
- intel quickassist technologyUntrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within...6.8 Medium
- samsung exynos 1380 firmwareAn issue was discovered in NPU in Samsung Mobile Processor Exynos through July 2025. There is an...5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +34 more +36 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreNtQueryInformation Token function (ntifs.h) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreDesktop Window Manager Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows Device Association Broker Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 moreWindows Agere Modem Driver Elevation of Privilege Vulnerability7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreUntrusted Pointer Dereference in DSP Service7.8 High
- qualcomm immersive home 214 platform firmware, immersive home 216 platform firmware, immersive home 316 platform firmware +23 more +25 moreUntrusted Pointer Dereference in TZ Firmware8.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qcc2072 firmware +16 more +18 moreUntrusted Pointer Dereference in Camera7.8 High
- rti connext professionalUntrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.8.3 High
- rti connext professionalUntrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation.8.3 High
- bytecodealliance webassembly micro runtime, wasm-micro-runtime +1 moreWAMR runtime hangs or crashes with large memory.fill addresses in LLVM-JIT mode2.1 Low
- microsoft windows 10 version 1607, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Connected Devices Platform Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +19 more +21 moreMicrosoft DWM Core Library Elevation of Privilege Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Information Disclosure Vulnerability7.1 High
- amd athlon™ 3000 series mobile processors with radeon™ graphics, radeon™ instinct™ mi25 graphics products, radeon™ pro v520 graphics products +25 more +27 moreImproper input validation in the AMD Graphics Driver could allow an attacker to supply a...8.4 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows MBT Transport Driver Elevation of Privilege Vulnerability7.8 High
arenaveccrates.ioarenavec has multiple memory corruption vulnerabilities in safe APIs8.9 High- microsoft windows 11 version 24h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreWindows Graphics Component Remote Code Execution Vulnerability9.8 Critical
- intel quickassist technologyUntrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2...6.8 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sc8380xp firmware +6 more +8 moreUntrusted Pointer Dereference in DSP Service7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +21 more +23 moreWindows Storage VSP Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMicrosoft Virtual Hard Disk Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreWindows Event Tracing Elevation of Privilege Vulnerability7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qmp1000 firmware +29 more +31 moreUntrusted Pointer Dereference in DSP Service7.8 High
- No product listedUntrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user...6.9 Medium
- microsoft excel, office, 365 apps +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 moreDirectX Graphics Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +17 more +19 moreWindows Kernel Elevation of Privilege Vulnerability7.8 High
- microsoft office, word, 365 apps +12 more +14 moreMicrosoft Word Remote Code Execution Vulnerability7.8 High
- ivanti endpoint managerAn untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1...6.1 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +9 more +11 moreWindows Subsystem for Linux (WSL2) Kernel Remote Code Execution Vulnerability8.4 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 moreMicrosoft Office Remote Code Execution Vulnerability7.8 High
- imagination technologies graphics ddkGPU DDK - Untrusted app can crash firmware by forcing MCU access to non-aligned address5.5 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sc8380xp firmware +6 more +8 moreUntrusted Pointer Dereference in DSP_Services7.8 High
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, sc8380xp firmware +6 more +8 moreUntrusted Pointer Dereference in DSP_Services7.8 High
- No product listedUntrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0...4.3 Medium
- microsoft excel, 365 apps, 365 apps for enterprise +9 more +11 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- Show moreLoading…