cve.bz

CWE-822: Untrusted Pointer Dereference, page 5

Filter

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

What the weakness is: CWE-822 at MITRE

Related attack patterns (CAPEC): 1
  • CAPEC-129 Pointer Manipulation Severity: Medium

The attack patterns MITRE's CAPEC relates to CWE-822, as MITRE names them. Credits.

Ask an AI about CWE-822

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-822: Untrusted Pointer Dereference and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/822.html and https://cve.bz/cve/cwe/822?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.8CVE-2024-49090EPSS 1.1%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  2. 6.7CVE-2024-33039EPSS 0.1%

    Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.

  3. 6.9CVE-2024-34023EPSS 0.2%

    Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.

  4. 7.8CVE-2024-43646EPSS 0.5%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  5. 7.8CVE-2024-43636EPSS 0.7%

    Win32k Elevation of Privilege Vulnerability

  6. 7.8CVE-2024-43631EPSS 0.5%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  7. 7.8CVE-2024-43629EPSS 4.4%

    Windows DWM Core Library Elevation of Privilege Vulnerability

  8. 8.8CVE-2024-43624EPSS 1.8%

    Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability

  9. 7.0CVE-2024-43553EPSS 0.5%

    NT OS Kernel Elevation of Privilege Vulnerability

  10. 7.3CVE-2024-43529EPSS 0.8%

    Windows Print Spooler Elevation of Privilege Vulnerability

  11. 7.8CVE-2024-43516EPSS 0.6%

    Windows Secure Kernel Mode Elevation of Privilege Vulnerability

  12. 6.7CVE-2024-37983EPSS 0.6%

    Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

  13. 7.8CVE-2024-37982EPSS 0.6%

    Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability

  14. 7.8CVE-2024-37979EPSS 0.6%

    Windows Kernel Elevation of Privilege Vulnerability

  15. 7.8CVE-2024-21455EPSS 0.2%

    Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver.

  16. 8.7CVE-2023-42772EPSS 0.2%

    Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to potentially enable escalation of privilege via local access.

  17. 8.8CVE-2024-37340EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  18. 8.8CVE-2024-37339EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  19. 7.8CVE-2024-33038EPSS 0.1%

    Memory corruption while passing untrusted/corrupted pointers from DSP to EVA.

  20. 7.8CVE-2024-38187EPSS 1.1%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  21. 7.8CVE-2024-38185EPSS 1.1%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  22. 8.8CVE-2024-36461EPSS 0.8%

    Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine.

  23. 8.4CVE-2024-40872EPSS 0.2%

    There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers with local access and valid desktop user credentials can elevate their privilege to system level b…

  24. 8.8CVE-2024-38104EPSS 1.8%

    Windows Fax Service Remote Code Execution Vulnerability

  25. 8.0CVE-2024-37969EPSS 1.4%

    Secure Boot Security Feature Bypass Vulnerability

  26. 7.8CVE-2024-0091EPSS 0.2%

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, informa…

  27. 7.8CVE-2024-35250KEVExploitEPSS 25%

    Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

  28. 7.0CVE-2024-30090EPSS 2.0%

    Microsoft Streaming Service Elevation of Privilege Vulnerability

  29. 7.4CVE-2024-27353EPSS 0.2%

    A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to es…

  30. 7.4CVE-2024-25078EPSS 0.1%

    A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and k…

  31. 7.8CVE-2023-40472EPSS 0.4%

    PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction …

  32. 7.8CVE-2023-40471EPSS 0.4%

    PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to…

  33. 7.8CVE-2023-39501EPSS 0.4%

    PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction …

  34. 7.8CVE-2023-35711EPSS 0.3%

    Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interactio…

  35. 7.8CVE-2023-34311EPSS 0.4%

    Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to…

  36. 7.8CVE-2023-34309EPSS 0.4%

    Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to…

  37. 7.8CVE-2023-34301EPSS 0.4%

    Ashlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interactio…

  38. 7.8CVE-2023-34300EPSS 0.4%

    Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interactio…

  39. 7.8CVE-2023-27342EPSS 0.5%

    PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction i…

  40. 7.5CVE-2024-26254EPSS 3.1%

    Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability

  41. 6.8CVE-2024-26252EPSS 0.7%

    Windows rndismp6.sys Remote Code Execution Vulnerability

  42. 7.0CVE-2024-26213EPSS 0.6%

    Microsoft Brokering File System Elevation of Privilege Vulnerability

  43. 7.8CVE-2024-23136EPSS 0.4%

    A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current …

  44. 7.8CVE-2024-21346EPSS 4.1%

    Win32k Elevation of Privilege Vulnerability

  45. 7.8CVE-2024-21338KEVExploitEPSS 60%

    Windows Kernel Elevation of Privilege Vulnerability

  46. 7.8CVE-2023-43532EPSS 0.1%

    Memory corruption while reading ACPI config through the user mode app.

  47. 9.8CVE-2023-43518EPSS 0.3%

    Memory corruption in video while parsing invalid mp2 clip.

  48. 7.8CVE-2023-34333EPSS 0.2%

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or ava…

  49. 7.8CVE-2023-34332EPSS 0.2%

    AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or avai…

  50. 7.8CVE-2024-20682EPSS 0.8%

    Windows Cryptographic Services Remote Code Execution Vulnerability