CWE-822
CVEs classified under CWE-822, newest first.
132 CVEsRSS
CVE-2026-88781Medium· 6.8Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing …
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing …
CVE-2026-19676High· 7.8PECI transfer syscall verifier does not validate embedded user buffer pointers, allowing arbitrary kernel memory read/write from user mode
The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c, checked only the device object permission and copied the caller-supplied struct peci_msg with k_usermode_from_copy(). Tha…
CVE-2026-110322Medium· 5.5HMS Networks PEAK-System PCAN Windows drivers Untrusted Pointer Dereference
The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before dereferencing fixed fields during post-processing.
CVE-2026-19595Medium· 6.1Zephyr RTIO syscall verifier validates output parameters for read instead of write access
The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure o…
CVE-2026-108435Medium· 6.5Microsoft Office Word Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
CVE-2026-96933High· 7.8Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-96931High· 7.8Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-96924Critical· 9.8Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
CVE-2026-96910Medium· 5.5Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-96847High· 7.8Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-96216High· 7.0Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-88219High· 8.8Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-88203Medium· 6.5Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
CVE-2026-88126High· 7.8Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
CVE-2026-88116High· 8.8Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88114High· 8.8Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88112High· 8.8Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-88098High· 7.0Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.
CVE-2026-85909Medium· 5.5Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
Out-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
CVE-2026-85903High· 8.8Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
CVE-2026-83848High· 7.8Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83826High· 7.8Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83587High· 7.8Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
CVE-2026-70300Critical· 9.8Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
CVE-2026-70275High· 8.8Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.
CVE-2026-70270Medium· 5.5Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-70172High· 7.8Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-70170Medium· 6.5Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.
CVE-2026-70167High· 8.8Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
Access of resource using incompatible type ('type confusion') in DNS Server allows an authorized attacker to execute code over a network.
CVE-2026-70111High· 8.1Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.