CWE-822 · Untrusted Pointer Dereference (page 3)
Page 3 of 3 — CVEs classified under CWE-822, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36011 | High | 7.8 | 2023-12-12 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-41139 | High | 7.8 | 2023-11-23 | A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability, along wi… |
CVE-2023-36045 | High | 7.8 | 2023-11-14 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2023-36033 | High | 7.8 | 2023-11-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2023-31023 | Medium | 5.5 | 2023-11-02 | NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of… |
CVE-2022-26942 | High | 8.2 | 2023-10-19 | The Motorola MTM5000 series firmwares lack pointer validation on arguments passed to trusted execution environment (TEE) modules. Two modules are used, one res… |
CVE-2023-36596 | High | 7.5 | 2023-10-10 | Remote Procedure Call Information Disclosure Vulnerability |
CVE-2023-36759 | Medium | 6.7 | 2023-09-12 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-21643 | Critical | 9.1 | 2023-08-08 | Memory corruption due to untrusted pointer dereference in automotive during system call. |
CVE-2023-1437 | Critical | 9.8 | 2023-08-02 | All versions prior to 9.1.4 of Advantech WebAccess/SCADA are vulnerable to use of untrusted pointers. The RPC arguments the client sent could contain raw memor… |
CVE-2023-32040 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-25515 | High | 7.8 | 2023-06-23 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial… |
CVE-2023-29360 | High | 8.4 | 2023-06-14 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2022-40533 | Medium | 6.2 | 2023-06-06 | Transient DOS due to untrusted Pointer Dereference in core while sending USB QMI request. |
CVE-2023-0184 | High | 8.8 | 2023-04-22 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of pr… |
CVE-2023-0189 | High | 8.8 | 2023-04-01 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation o… |
CVE-2023-23394 | Medium | 5.5 | 2023-03-14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
CVE-2022-42418 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |
CVE-2022-42396 | High | 7.8 | 2023-01-26 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit t… |
CVE-2023-21768 | High | 7.8 | 2023-01-10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2023-21677 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2022-2002 | High | 7.8 | 2022-12-07 | GE CIMPICITY versions 2022 and prior is vulnerable when data from faulting address controls code flow starting at gmmiObj!CGmmiOptionContainer, which could… |
CVE-2022-2894 | High | 7.8 | 2022-08-31 | Measuresoft ScadaPro Server (All Versions) uses unmaintained ActiveX controls. The controls may allow seven untrusted pointer deference instances while process… |
CVE-2022-34890 | High | 8.8 | 2022-07-18 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must fir… |
CVE-2022-20796 | Medium | 6.5 | 2022-05-04 | On May 4, 2022, the following vulnerability in the ClamAV scanning library versions 0.103.5 and earlier and 0.104.2 and earlier was disclosed: A vulnerability… |
CVE-2022-22514 | High | 7.1 | 2022-04-07 | An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of… |
CVE-2021-38401 | High | 7.8 | 2021-12-20 | Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an untrusted pointer dereference, which may allow an attacker to ex… |
CVE-2021-31504 | High | 7.8 | 2021-08-03 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134)… |
CVE-2021-31500 | High | 7.8 | 2021-06-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is requir… |
CVE-2021-31481 | High | 7.8 | 2021-06-15 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is requir… |
CVE-2021-20239 | Low | 3.3 | 2021-05-28 | A flaw was found in the Linux kernel in versions before 5.4.92 in the BPF protocol. This flaw allows an attacker with a local account to leak information about… |
CVE-2021-27496 | High | 7.8 | 2021-05-27 | Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validat… |
CVE-2020-26997 | High | 7.8 | 2021-04-22 | A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Ver… |
CVE-2020-1899 | High | 7.5 | 2021-03-11 | The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addr… |
CVE-2021-22649 | High | 7.8 | 2021-02-23 | Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR… |
CVE-2020-27003 | High | 7.8 | 2021-02-09 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.1), Teamcenter Visualization (All versions < V13.1.0.1). Affected applications lack proper… |
CVE-2020-27259 | High | 8.8 | 2021-02-09 | The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execut… |
CVE-2020-27288 | High | 7.8 | 2021-01-26 | An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to craft a special proj… |
CVE-2020-26991 | High | 8.8 | 2021-01-12 | A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper… |
CVE-2020-27289 | High | 7.8 | 2021-01-11 | Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to exec… |
CVE-2020-27277 | High | 7.8 | 2021-01-11 | Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execut… |
CVE-2020-14392 | Medium | 5.5 | 2020-09-16 | An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory… |
CVE-2020-17392 | High | 8.8 | 2020-08-25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the… |
CVE-2019-13334 | High | 7.8 | 2020-02-08 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to… |
CVE-2018-19029 | High | 7.8 | 2019-02-05 | LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, wh… |
CVE-2018-12548 | Critical | 9.8 | 2019-01-31 | In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer val… |
CVE-2018-17893 | Critical | 9.8 | 2018-10-17 | LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution. |
CVE-2018-14811 | Critical | 9.8 | 2018-09-26 | Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution. |
CVE-2018-7497 | Critical | 9.8 | 2018-05-15 | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada… |
CVE-2018-7502 | High | 7.8 | 2018-03-23 | Kernel drivers in Beckhoff TwinCAT 3.1 Build 4022.4, TwinCAT 2.11 R3 2259, and TwinCAT 3.1 lack proper validation of user-supplied pointer values. An attacker… |
CVE-2018-7525 | Medium | 5.3 | 2018-03-21 | In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untrusted pointer dereference vulnerability. |
CVE-2017-16728 | High | 7.5 | 2018-01-05 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attack… |
CVE-2017-12719 | High | 7.5 | 2017-11-06 | An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dere… |