CWE-822

Untrusted Pointer Dereference

Parent: CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

200 vulnerabilities with CWE-822
CVE-2026-45645 HIGH
Microsoft Office Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-45643 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-45471 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 7.8
CVE-2026-44805 MEDIUM
Windows Network Controller (NC) Host Agent Denial of Service Vulnerability
CVSS 5.5
CVE-2026-8835 HIGH
IBM HTTP Server is affected by multiple vulnerabilities
CVSS 7.3
CVE-2026-40369 HIGH
Microsoft Windows 11 Version 24H2 - Windows Kernel Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-40367 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 8.4
CVE-2026-20738 HIGH
Intel(R) QuickAssist Adapter 8960 software < 1.13 - Untrusted Pointer Dereference
CVE-2026-33120 HIGH
Microsoft SQL Server Remote Code Execution Vulnerability
CVSS 8.8
CVE-2026-33114 HIGH
Microsoft Word Remote Code Execution Vulnerability
CVSS 8.4
CVE-2026-32222 HIGH
Windows Win32k Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-32077 HIGH
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-27920 HIGH
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-27919 HIGH
Windows UPnP Device Host Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-26161 HIGH
Windows Sensor Data Service Elevation of Privilege Vulnerability
CVSS 7.8
CVE-2026-23670 MEDIUM
Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
CVSS 5.7
CVE-2026-26113 HIGH
Microsoft Office - Memory Corruption
CVSS 8.4
CVE-2026-26112 HIGH
Microsoft Office Excel - Memory Corruption
CVSS 7.8
CVE-2026-21250 HIGH
Windows HTTP.sys - Privilege Escalation
CVSS 7.8
CVE-2026-21232 HIGH
Windows HTTP.sys - Privilege Escalation
CVSS 7.8
CVE-2026-20956 HIGH
Microsoft Office Excel - Code Injection
CVSS 7.8
CVE-2026-20955 HIGH
Microsoft Office Excel - Code Injection
CVSS 7.8
CVE-2026-20948 HIGH
Microsoft 365 Apps and Office - Untrusted Pointer Dereference
CVSS 7.8
CVE-2026-20940 HIGH
Windows Cloud Files Mini Filter Driver - Buffer Overflow
CVSS 7.8
CVE-2026-20938 HIGH
Windows VBS Enclave - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities 200
Links
MITRE CWE Entry Search this CWE With Exploits