cve.bz

CWE-822: Untrusted Pointer Dereference, page 4

Filter

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

What the weakness is: CWE-822 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-129 Pointer Manipulation Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-822, as MITRE names them. Credits.

Ask an AI about CWE-822

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-822: Untrusted Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/822.html and https://cve.bz/cve/cwe/822?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 4.3CVE-2025-60728EPSS 0.8%

    Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

  2. 7.0CVE-2025-60719EPSS 1.9%

    Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  3. 7.8CVE-2025-60713EPSS 0.4%

    Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

  4. 6.5CVE-2025-60708EPSS 0.5%

    Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally.

  5. 7.8CVE-2025-60703EPSS 0.4%

    Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

  6. 6.8CVE-2025-32446EPSS 0.1%

    Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a l…

  7. 6.8CVE-2025-27710EPSS 0.1%

    Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure. System software adversary with an authenticated user combined with a low compl…

  8. 5.3CVE-2025-54331EPSS 0.3%

    An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_header function.

  9. 7.8CVE-2025-59207EPSS 0.4%

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

  10. 7.8CVE-2025-59187EPSS 0.3%

    Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally.

  11. 7.0CVE-2025-55696EPSS 0.2%

    Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally.

  12. 7.8CVE-2025-55681EPSS 5.5%

    Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

  13. 7.8CVE-2025-55677EPSS 0.4%

    Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally.

  14. 7.8CVE-2025-24990KEVEPSS 6.5%

    Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed …

  15. 7.8CVE-2025-47338EPSS 0.09%

    Memory corruption while processing escape commands from userspace.

  16. 8.8CVE-2025-27060EPSS 0.09%

    Memory corruption while performing SCM call with malformed inputs.

  17. 7.8CVE-2025-27048EPSS 0.09%

    Memory corruption while processing camera platform driver IOCTL calls.

  18. 8.3CVE-2025-4993EPSS 0.4%

    Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.0.0 before 7.3.0.10, from 6.1.0 before 6.1.2.27,…

  19. 8.3CVE-2025-1255EPSS 0.4%

    Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional: from 7.4.0 before 7.6.0, from 7.2.0 before 7.3.0.9.

  20. 2.1CVE-2025-58749EPSS 0.4%

    WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memo…

  21. 7.1CVE-2025-54905EPSS 0.6%

    Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

  22. 7.0CVE-2025-54114EPSS 0.3%

    Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

  23. 7.8CVE-2025-53801EPSS 0.5%

    Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally.

  24. 8.4CVE-2024-36352EPSS 0.1%

    Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or denial of service.

  25. 7.8CVE-2025-55230EPSS 0.4%

    Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally.

  26. 9.8CVE-2025-50165EPSS 11%

    Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

  27. 6.8CVE-2025-20090EPSS 0.1%

    Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.

  28. 7.8CVE-2025-27069EPSS 0.09%

    Memory corruption while processing DDI command calls.

  29. 7.8CVE-2025-49689EPSS 0.7%

    Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

  30. 7.8CVE-2025-49661EPSS 0.4%

    Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

  31. 7.8CVE-2025-47985EPSS 0.4%

    Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

  32. 7.8CVE-2025-47982EPSS 0.4%

    Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

  33. 7.8CVE-2025-21486EPSS 0.1%

    Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

  34. 6.9CVE-2025-20018EPSS 0.2%

    Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.

  35. 7.8CVE-2025-30381EPSS 0.6%

    Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

  36. 7.8CVE-2025-29812EPSS 0.9%

    Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally.

  37. 7.8CVE-2025-27747EPSS 0.8%

    Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

  38. 7.8CVE-2025-27739EPSS 0.6%

    Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

  39. 6.1CVE-2025-22464EPSS 0.2%

    An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.

  40. 8.4CVE-2025-24084EPSS 0.7%

    Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

  41. 7.8CVE-2025-24083EPSS 0.7%

    Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

  42. 5.5CVE-2024-12576EPSS 0.1%

    Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics output.

  43. 7.8CVE-2024-53034EPSS 0.1%

    Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.

  44. 7.8CVE-2024-53033EPSS 0.1%

    Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.

  45. 4.3CVE-2023-32277EPSS 0.2%

    Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticated user to potentially enable information disclosure via local operating system access.

  46. 7.8CVE-2025-21381EPSS 1.1%

    Microsoft Excel Remote Code Execution Vulnerability

  47. 7.8CVE-2025-21358EPSS 0.8%

    Windows Core Messaging Elevation of Privileges Vulnerability

  48. 7.8CVE-2024-45584EPSS 0.1%

    Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace.

  49. 7.8CVE-2025-21363EPSS 0.8%

    Microsoft Word Remote Code Execution Vulnerability

  50. 7.8CVE-2025-21354EPSS 0.9%

    Microsoft Excel Remote Code Execution Vulnerability