CWE-822 · Untrusted Pointer Dereference (page 2)
Page 2 of 3 — CVEs classified under CWE-822, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-60708 | Medium | 6.5 | 2025-11-11 | Untrusted pointer dereference in Storvsp.sys Driver allows an authorized attacker to deny service locally. |
CVE-2025-60703 | High | 7.8 | 2025-11-11 | Untrusted pointer dereference in Windows Remote Desktop allows an authorized attacker to elevate privileges locally. |
CVE-2025-32446 | Medium | 6.5 | 2025-11-11 | Untrusted pointer dereference for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Applications may allow an escalation of p… |
CVE-2025-27710 | Medium | 6.5 | 2025-11-11 | Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow an information disclosure… |
CVE-2025-54331 | Medium | 5.3 | 2025-11-04 | An issue was discovered in NPU in Samsung Mobile Processor Exynos 1380 through July 2025. There is an Untrusted Pointer Dereference of src_hdr in the copy_ncp_… |
CVE-2025-59207 | High | 7.8 | 2025-10-14 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-59187 | High | 7.8 | 2025-10-14 | Improper input validation in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-55696 | High | 7.8 | 2025-10-14 | Time-of-check time-of-use (toctou) race condition in NtQueryInformation Token function (ntifs.h) allows an authorized attacker to elevate privileges locally. |
CVE-2025-55681 | High | 7.0 | 2025-10-14 | Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2025-55677 | High | 7.8 | 2025-10-14 | Untrusted pointer dereference in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally. |
CVE-2025-24990 | High | 7.8 | 2025-10-14 | Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcem… |
CVE-2025-47338 | High | 7.8 | 2025-10-09 | Memory corruption while processing escape commands from userspace. |
CVE-2025-27060 | High | 8.8 | 2025-10-09 | Memory corruption while performing SCM call with malformed inputs. |
CVE-2025-27048 | High | 7.8 | 2025-10-09 | Memory corruption while processing camera platform driver IOCTL calls. |
CVE-2025-4993 | Critical | 9.1 | 2025-09-23 | Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional… |
CVE-2025-1255 | Critical | 9.1 | 2025-09-23 | Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. This issue affects Connext Professional… |
CVE-2025-58749 | Medium | 5.3 | 2025-09-16 | WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the ru… |
CVE-2025-54905 | High | 7.1 | 2025-09-09 | Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally. |
CVE-2025-54114 | High | 7.0 | 2025-09-09 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized… |
CVE-2025-53801 | High | 7.8 | 2025-09-09 | Untrusted pointer dereference in Windows DWM allows an authorized attacker to elevate privileges locally. |
CVE-2024-36352 | High | 8.4 | 2025-09-06 | Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary writes or… |
CVE-2025-55230 | High | 7.8 | 2025-08-21 | Untrusted pointer dereference in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-50165 | Critical | 9.8 | 2025-08-12 | Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. |
CVE-2025-20090 | Medium | 5.5 | 2025-08-12 | Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable deni… |
CVE-2025-27069 | High | 7.8 | 2025-08-06 | Memory corruption while processing DDI command calls. |
CVE-2025-49689 | High | 7.8 | 2025-07-08 | Integer overflow or wraparound in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally. |
CVE-2025-49661 | High | 7.8 | 2025-07-08 | Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. |
CVE-2025-47985 | High | 7.8 | 2025-07-08 | Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally. |
CVE-2025-47982 | High | 7.8 | 2025-07-08 | Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally. |
CVE-2025-21486 | High | 7.8 | 2025-06-03 | Memory corruption during dynamic process creation call when client is only passing address and length of shell binary. |
CVE-2025-20018 | High | 8.4 | 2025-05-13 | Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2025-30381 | High | 7.8 | 2025-05-13 | Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally. |
CVE-2025-29812 | High | 7.8 | 2025-04-08 | Untrusted pointer dereference in Windows Kernel Memory allows an authorized attacker to elevate privileges locally. |
CVE-2025-27747 | High | 7.8 | 2025-04-08 | Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. |
CVE-2025-27739 | High | 7.8 | 2025-04-08 | Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2025-22464 | Medium | 6.1 | 2025-04-08 | An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local acce… |
CVE-2025-24084 | High | 8.4 | 2025-03-11 | Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally. |
CVE-2025-24083 | High | 7.8 | 2025-03-11 | Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally. |
CVE-2024-12576 | Medium | 5.5 | 2025-03-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger a crash of the FW running on the GPU freezing graphics out… |
CVE-2024-53034 | High | 7.8 | 2025-03-03 | Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset. |
CVE-2024-53033 | High | 7.8 | 2025-03-03 | Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address. |
CVE-2023-32277 | Medium | 6.1 | 2025-02-12 | Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticated user to potentially enable informati… |
CVE-2025-21381 | High | 7.8 | 2025-02-11 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2025-21358 | High | 7.8 | 2025-02-11 | Windows Core Messaging Elevation of Privileges Vulnerability |
CVE-2024-45584 | High | 7.8 | 2025-02-03 | Memory corruption can occur when a compat IOCTL call is followed by a normal IOCTL call from userspace. |
CVE-2025-21363 | High | 7.8 | 2025-01-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2025-21354 | High | 8.4 | 2025-01-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2024-49090 | High | 7.8 | 2024-12-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2024-33039 | Medium | 6.7 | 2024-12-02 | Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service. |
CVE-2024-34023 | High | 8.4 | 2024-11-13 | Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2024-43646 | Medium | 6.7 | 2024-11-12 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-43636 | High | 7.8 | 2024-11-12 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-43631 | Medium | 6.7 | 2024-11-12 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-43629 | High | 7.8 | 2024-11-12 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2024-43624 | High | 8.8 | 2024-11-12 | Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability |
CVE-2024-43553 | High | 7.4 | 2024-10-08 | NT OS Kernel Elevation of Privilege Vulnerability |
CVE-2024-43529 | High | 7.3 | 2024-10-08 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2024-43516 | High | 7.8 | 2024-10-08 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability |
CVE-2024-37983 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-37982 | Medium | 6.7 | 2024-10-08 | Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability |
CVE-2024-37979 | Medium | 6.7 | 2024-10-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21455 | High | 7.8 | 2024-10-07 | Memory corruption when a compat IOCTL call is followed by another IOCTL call from userspace to a driver. |
CVE-2023-42772 | High | 8.2 | 2024-09-16 | Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to potentially enable escalation of privilege… |
CVE-2024-37340 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-37339 | High | 8.8 | 2024-09-10 | Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability |
CVE-2024-33038 | High | 7.8 | 2024-09-02 | Memory corruption while passing untrusted/corrupted pointers from DSP to EVA. |
CVE-2024-38187 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-38185 | High | 7.8 | 2024-08-13 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-36461 | Critical | 9.1 | 2024-08-12 | Within Zabbix, users have the ability to directly modify memory pointers in the JavaScript engine. |
CVE-2024-40872 | High | 8.4 | 2024-07-25 | There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers with local access… |
CVE-2024-38104 | High | 8.8 | 2024-07-09 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2024-37969 | High | 8.0 | 2024-07-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2024-0091 | High | 7.8 | 2024-06-13 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A s… |
CVE-2024-35250 | High | 7.8 | 2024-06-11 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-30090 | High | 7.0 | 2024-06-11 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2024-27353 | High | 7.4 | 2024-05-15 | A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46… |
CVE-2024-25078 | High | 7.4 | 2024-05-15 | A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.0… |
CVE-2023-40472 | High | 7.8 | 2024-05-03 | PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2023-40471 | High | 7.8 | 2024-05-03 | PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2023-39501 | High | 7.8 | 2024-05-03 | PDF-XChange Editor OXPS File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2023-35711 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2023-34311 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-34309 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-34301 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2023-34300 | High | 7.8 | 2024-05-03 | Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute a… |
CVE-2023-27342 | High | 7.8 | 2024-05-03 | PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute ar… |
CVE-2024-26254 | High | 7.5 | 2024-04-09 | Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability |
CVE-2024-26252 | Medium | 6.8 | 2024-04-09 | Windows rndismp6.sys Remote Code Execution Vulnerability |
CVE-2024-26213 | High | 7.0 | 2024-04-09 | Microsoft Brokering File System Elevation of Privilege Vulnerability |
CVE-2024-23136 | High | 7.8 | 2024-02-22 | A maliciously crafted STP file in ASMKERN228A.dll when parsed through Autodesk applications can be used to dereference an untrusted pointer. This vulnerability… |
CVE-2024-21346 | High | 7.8 | 2024-02-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-21338 | High | 7.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-43532 | High | 8.4 | 2024-02-06 | Memory corruption while reading ACPI config through the user mode app. |
CVE-2023-43518 | High | 7.3 | 2024-02-06 | Memory corruption in video while parsing invalid mp2 clip. |
CVE-2023-34333 | High | 7.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful expl… |
CVE-2023-34332 | High | 7.8 | 2024-01-09 | AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful explo… |
CVE-2024-20682 | High | 7.8 | 2024-01-09 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2024-20680 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |
CVE-2024-20664 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-20663 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |