CWE-822

Untrusted Pointer Dereference

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

212 vulnerabilities with CWE-822
CVE-2026-15029 HIGH
Asus System Control Interface v3 - Untrusted Pointer Dereference
CVE-2026-48340 HIGH
Adobe Bridge - Bridge | Untrusted Pointer Dereference (CWE-822)
CVSS 7.8
CVE-2026-55138 MEDIUM
Microsoft Excel Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-55136 HIGH
Microsoft Excel Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-50479 HIGH
Microsoft Windows 10 Version 1809 - Windows USB Hub Driver Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50441 HIGH
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-50424 HIGH
Microsoft Windows 11 Version 24H2 - Windows Domain Controller Denial of Service Vulnerability
CVSS 7.5
CVE-2026-50382 HIGH
Microsoft Windows 10 Version 1809 - DirectX Graphics Kernel Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-50367 HIGH
Microsoft Windows 10 Version 1809 - Windows Sensor Data Service Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-48580 MEDIUM
Microsoft Excel Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-58596 HIGH
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS 8.3
CVE-2026-48137 CRITICAL
Untrusted pointer dereference in NI grpc-device sideband streaming API
CVSS 9.1
CVE-2026-45645 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-45643 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-45471 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-44805 MEDIUM
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
CVSS 5.5
CVE-2026-8835 HIGH
IBM HTTP Server is affected by multiple vulnerabilities
CVSS 7.3
CVE-2026-40369 HIGH
Microsoft Windows 11 Version 24H2 - Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-40367 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 8.4
CVE-2026-20738 HIGH
Intel(R) QuickAssist Adapter 8960 software < 1.13 - Untrusted Pointer Dereference
CVE-2026-33120 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-33114 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 8.4
CVE-2026-32222 HIGH
Windows Win32k Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-32077 HIGH
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-27920 HIGH
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS 7.8
Details
Vulnerabilities 212
Links
MITRE CWE Entry Search this CWE With Exploits