cve.bz

CWE-822: Untrusted Pointer Dereference, page 3

Filter

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

What the weakness is: CWE-822 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-129 Pointer Manipulation Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-822, as MITRE names them. Credits.

Ask an AI about CWE-822

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-822: Untrusted Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/822.html and https://cve.bz/cve/cwe/822?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-50382EPSS 0.3%

    Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.

  2. 7.8CVE-2026-50367EPSS 0.3%

    Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  3. 5.5CVE-2026-48580EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

  4. 8.3CVE-2026-58596EPSS 0.6%

    Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

  5. 9.3CVE-2026-48137EPSS 0.8%

    There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution.  Successful exploitat…

  6. 7.8CVE-2026-45645EPSS 0.4%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  7. 7.8CVE-2026-45643EPSS 0.4%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  8. 7.8CVE-2026-45471EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  9. 5.5CVE-2026-44805EPSS 0.4%

    Use after free in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally.

  10. 7.3CVE-2026-8835EPSS 0.3%

    IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.

  11. 7.2CVE-2025-62627EPSS 0.10%

    An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availabilit…

  12. 7.8CVE-2026-40369EPSS 4.7%

    Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

  13. 8.4CVE-2026-40367EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  14. 8.5CVE-2026-20738EPSS 0.1%

    Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combine…

  15. 9.8CVE-2026-43067EPSS 0.5%

    In the Linux kernel, the following vulnerability has been resolved: ext4: handle wraparound when searching for blocks for indirect mapped blocks Commit 4865c768b563 ("ext4: always allocate blocks only from groups inode can use") restrict…

  16. 7.8CVE-2025-47408EPSS 0.07%

    Memory corruption when another driver calls an IOCTL with invalid input/output buffer.

  17. 7.8CVE-2025-47405EPSS 0.07%

    Memory corruption when processing camera sensor input/output control codes with invalid output buffers.

  18. 8.8CVE-2026-33120EPSS 0.7%

    Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.

  19. 8.4CVE-2026-33114EPSS 0.3%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  20. 7.8CVE-2026-32222EPSS 0.3%

    Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  21. 7.8CVE-2026-32077EPSS 0.3%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  22. 7.8CVE-2026-27920EPSS 0.2%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2026-27919EPSS 0.3%

    Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

  24. 7.8CVE-2026-26161EPSS 0.3%

    Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

  25. 5.7CVE-2026-23670EPSS 0.3%

    Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

  26. 7.8CVE-2026-26113EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  27. 7.8CVE-2026-26112EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  28. 1.8CVE-2021-26410EPSS 0.2%

    Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential infor…

  29. 7.8CVE-2026-21250ExploitEPSS 1.1%

    Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

  30. 7.8CVE-2026-21232EPSS 0.4%

    Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

  31. 6.8CVE-2025-59959EPSS 0.1%

    An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Service (DoS). When the …

  32. 7.8CVE-2026-20956EPSS 0.4%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  33. 7.8CVE-2026-20955EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  34. 7.8CVE-2026-20948EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  35. 7.8CVE-2026-20940EPSS 0.5%

    Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  36. 7.8CVE-2026-20938EPSS 0.5%

    Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

  37. 6.2CVE-2026-20935EPSS 0.4%

    Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.

  38. 7.8CVE-2026-20857EPSS 0.5%

    Untrusted pointer dereference in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

  39. 5.5CVE-2026-20819EPSS 0.5%

    Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

  40. 7.8CVE-2026-20811EPSS 0.5%

    Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

  41. 7.8CVE-2025-47380EPSS 0.08%

    Memory corruption while preprocessing IOCTLs in sensors.

  42. 7.8CVE-2025-47343EPSS 0.08%

    Memory corruption while processing a video session to set video parameters.

  43. 6.2CVE-2025-52516EPSS 0.1%

    An issue was discovered in the Camera in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500. An invalid kernel address dereference in the issimian device driver leads to a denial of service.

  44. 7.8CVE-2025-47387EPSS 0.10%

    Memory Corruption when processing IOCTLs for JPEG data without verification.

  45. 5.5CVE-2025-47325EPSS 0.08%

    Information disclosure while processing system calls with invalid parameters.

  46. 7.8CVE-2025-62561EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  47. 7.8CVE-2025-62560EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  48. 7.8CVE-2025-62556EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  49. 8.8CVE-2025-62549EPSS 1.3%

    Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

  50. 7.8CVE-2025-62200EPSS 0.5%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.