CWE-822
302 CVEs • Abstraction: Base
Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
CVEs (302)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally. |
1Microsoft 3365 Apps Office 2021Office 2024Oct 14, 2026 Oct 13, 2026 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network. |
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally. |
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 22, 2026 Oct 13, 2026 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network. |
1Microsoft 2Windows Server 2022 Windows Server 2025Oct 16, 2026 Oct 13, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 22, 2026 Oct 13, 2026 N/A· v4 8.1 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network. |
1Microsoft 11Windows 10 1809 Windows 10 21h2Windows 10 22h2+8 moreOct 21, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. |
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 16, 2026 Oct 13, 2026 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. |
Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally. |
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |
Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network. |
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 20, 2026 Oct 13, 2026 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack. |
1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 21h2+11 moreOct 20, 2026 Oct 13, 2026 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally. |
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally. |
The Affinity by Canva app before 3.3.1 (October 2026 release) did not perform adequate bounds checking when parsing Affinity document files, leading to an out-of-bounds pointer dereference. A threat actor could craft an...Show more |