← Back
CWE-822

212 CVEs • Abstraction: Base

Untrusted Pointer Dereference

The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.

JSON object

Loading...

CVEs (212)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
-
-
Jun 17, 2026
May 12, 2026
8.5 HIGH· v4
N/A· v3
N/A· v2
Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authent...Show more
Untrusted pointer dereference for some Intel(R) QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.Show less
1Qualcomm
20Fastconnect 6200 Firmware
Fastconnect 6900 FirmwareFastconnect 7800 Firmware+17 more
Jun 17, 2026
May 4, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when another driver calls an IOCTL with invalid input/output buffer.
1Qualcomm
16Fastconnect 6900 Firmware
Fastconnect 7800 FirmwareIqx5121 Firmware+13 more
Jun 17, 2026
May 4, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Memory corruption when processing camera sensor input/output control codes with invalid output buffers.
1Microsoft
5Sql Server 2016
Sql Server 2017Sql Server 2019+2 more
Jul 24, 2026
Apr 14, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network.
1Microsoft
2365 Apps
Office Long Term Servicing Channel
Jul 24, 2026
Apr 14, 2026
N/A· v4
8.4 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows 11 26h1+1 more
Jul 25, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
1Microsoft
14Windows 10 1607
Windows 10 1809Windows 10 21h2+11 more
Jun 17, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.
1Microsoft
11Windows 10 1809
Windows 10 21h2Windows 10 22h2+8 more
Jun 17, 2026
Apr 14, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Jun 17, 2026
Apr 14, 2026
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
ExcelOffice+2 more
Jun 17, 2026
Mar 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
-
Jun 17, 2026
Feb 10, 2026
1.8 LOW· v4
N/A· v3
N/A· v2
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading...Show more
Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer the contents of the kernel memory leading to potential information disclosure.Show less
1Microsoft
4Windows 11 24h2
Windows 11 25h2Windows Server 2022 23h2+1 more
Jun 17, 2026
Feb 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
1Microsoft
5Windows 11 23h2
Windows 11 24h2Windows 11 25h2+2 more
Jun 17, 2026
Feb 10, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
1Juniper
2Junos
Junos Os Evolved
Jun 17, 2026
Jan 15, 2026
6.8 MEDIUM· v4
5.5 MEDIUM· v3
N/A· v2
An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Servic...Show more
An Untrusted Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial-of-Service (DoS). When the command 'show route < ( receive-protocol | advertising-protocol ) bgp > detail' is executed, and at least one of the routes in the intended output has specific attributes, this will cause an rpd crash and restart. 'show route ... extensive' is not affected. This issue affects: Junos OS:  * all versions before 22.4R3-S8, * 23.2 versions before 23.2R2-S5, * 23.4 versions before 23.4R2-S5, * 24.2 versions before 24.2R2-S2, * 24.4 versions before 24.4R2; Junos OS Evolved: * all versions before 22.4R3-S8-EVO,  * 23.2 versions before 23.2R2-S5-EVO, * 23.4 versions before 23.4R2-S6-EVO, * 24.2 versions before 24.2R2-S2-EVO, * 24.4 versions before 24.4R2-EVO.Show less
1Microsoft
2365 Apps
Office Long Term Servicing Channel
Jun 17, 2026
Jan 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
4365 Apps
OfficeOffice Long Term Servicing Channel+1 more
Jun 17, 2026
Jan 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
1Microsoft
5365 Apps
OfficeOffice Long Term Servicing Channel+2 more
Jun 17, 2026
Jan 13, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally.