CWE-822: Untrusted Pointer Dereference, page 6

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

What the weakness is: CWE-822 at MITRE

1. 6.5CVE-2024-20680EPSS 2.0%2024-01-09

   Windows Message Queuing Client (MSMQC) Information Disclosure

2. 6.5CVE-2024-20664EPSS 2.0%2024-01-09

   Microsoft Message Queuing Information Disclosure Vulnerability

3. 6.5CVE-2024-20663EPSS 1.9%2024-01-09

   Windows Message Queuing Client (MSMQC) Information Disclosure

4. 7.8CVE-2023-36011EPSS 0.7%2023-12-12

   Win32k Elevation of Privilege Vulnerability

5. 7.8CVE-2023-41139EPSS 0.3%2023-11-23

   A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process.

6. 7.8CVE-2023-36045EPSS 1.0%2023-11-14

   Microsoft Office Graphics Remote Code Execution Vulnerability

7. 7.8CVE-2023-36033KEVEPSS 11%2023-11-14

   Windows DWM Core Library Elevation of Privilege Vulnerability

8. 5.5CVE-2023-31023EPSS 0.2%2023-11-02

   NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.

9. 8.2CVE-2022-26942EPSS 0.2%2023-10-19

   The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one responsible for KVL key management and the other for TETRA cryptographic functional…

10. 7.5CVE-2023-36596EPSS 2.1%2023-10-10

    Remote Procedure Call Information Disclosure Vulnerability

11. 6.7CVE-2023-36759EPSS 0.5%2023-09-12

    Visual Studio Elevation of Privilege Vulnerability

12. 7.8CVE-2023-21643EPSS 0.2%2023-08-08

    Memory corruption due to untrusted pointer dereference in automotive during system call.

13. 9.8CVE-2023-1437EPSS 2.8%2023-08-02

    All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memory pointers for the server to use as-is. This could allow an attacker to gain acc…

14. 5.5CVE-2023-32040EPSS 0.5%2023-07-11

    Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

15. 7.6CVE-2023-25515EPSS 0.2%2023-06-23

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure.

16. 8.4CVE-2023-29360KEVEPSS 22%2023-06-14

    Microsoft Streaming Service Elevation of Privilege Vulnerability

17. 5.5CVE-2022-40533EPSS 0.1%2023-06-06

    Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request.

18. 7.8CVE-2023-0184EPSS 0.3%2023-04-22

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering.

19. 7.8CVE-2023-0189EPSS 0.3%2023-04-01

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

20. 5.5CVE-2023-23394EPSS 0.5%2023-03-14

    Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

21. 7.8CVE-2022-42418EPSS 0.4%2023-01-26

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

22. 7.8CVE-2022-42396EPSS 0.4%2023-01-26

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malic…

23. 7.8CVE-2023-21768ExploitEPSS 65%2023-01-10

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

24. 7.5CVE-2023-21677EPSS 2.0%2023-01-10

    Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

25. 7.8CVE-2022-2002EPSS 0.3%2022-12-07

    GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could allow an attacker to execute arbitrary code.

26. 7.8CVE-2022-2894EPSS 0.3%2022-08-31

    Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while processing a specific project file.

27. 8.8CVE-2022-34890EPSS 0.3%2022-07-18

    This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-privileged code on the target guest system …

28. 5.5CVE-2022-20796EPSS 0.4%2022-05-04

    On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability in Clam AntiVirus (ClamAV) versions 0.103.4, 0.103.5, 0.104.1, and 0.104.2 could…

29. 7.1CVE-2022-22514EPSS 1.0%2022-04-07

    An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read…

30. 7.8CVE-2021-38401EPSS 1.0%2021-12-20

    Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.

31. 7.8CVE-2021-31504EPSS 1.4%2021-08-03

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). User interaction is required to exploit this vulnerability in that the target m…

32. 7.8CVE-2021-31500EPSS 1.4%2021-06-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page …

33. 7.8CVE-2021-31481EPSS 1.4%2021-06-15

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this vulnerability in that the target must visit a malicious page …

34. 3.3CVE-2021-20239EPSS 0.3%2021-05-28

    A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about kernel internal addresses. The highest threat from this vulnerability is to con…

35. 7.8CVE-2021-27496EPSS 2.0%2021-05-27

    Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied data when parsing PRT files. This could lead to pointer der…

36. 7.8CVE-2020-26997EPSS 1.0%2021-04-22

    A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplie…

37. 7.5CVE-2020-1899EPSS 1.2%2021-03-11

    The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affec…

38. 7.8CVE-2021-22649EPSS 2.2%2021-02-23

    Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while proce…

39. 7.8CVE-2020-27003EPSS 0.7%2021-02-09

    A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper validation of user-supplied data when parsing TIFF files. This could lead to po…

40. 8.8CVE-2020-27259EPSS 2.7%2021-02-09

    The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code.

41. 7.8CVE-2020-27288EPSS 1.3%2021-01-26

    An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.

42. 8.8CVE-2020-26991EPSS 4.2%2021-01-12

    A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-supplied data when parsing ASM files. This could lead to poi…

43. 7.8CVE-2020-27289EPSS 2.0%2021-01-11

    Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.

44. 7.8CVE-2020-27277EPSS 2.3%2021-01-11

    Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.

45. 5.5CVE-2020-14392EPSS 0.6%2020-09-16

    An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability.

46. 8.8CVE-2020-17392EPSS 0.5%2020-08-25

    This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit…

47. 7.8CVE-2019-13334EPSS 6.8%2020-02-08

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or op…

48. 7.8CVE-2018-19029EPSS 2.7%2019-02-05

    LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote code execution, data exfiltration, or cause a system crash.

49. 9.8CVE-2018-12548EPSS 1.1%2019-01-31

    In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are dereferenced in the native code.

50. 9.8CVE-2018-17893EPSS 6.4%2018-10-17

    LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.