Weakness (CWE)
CWE-822: Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
Source: MITRE CWE-822
265 results · Clear filters · Feed
-
High 7.8
Microsoft Office Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft SQL Server Elevation of Privilege Vulnerability
Untrusted pointer dereference in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
High 8.1
Windows Modern Device Management (MDM) Remote Code Execution Vulnerability
Use after free in Windows Modern Device Management (MDM) allows an unauthorized attacker to execute code over a network.
-
High 7.8
Volume Shadow Copy Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges locally.
-
High 7.8
Windows Function Discovery Resource Publication Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Function Discovery Resource Publication allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows SMB Client Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Message Queuing Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Untrusted pointer dereference in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Client for NFS Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Client for NFS allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft JScript Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft JScript allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows MIDI Service Module Elevation of Privileges Vulnerability
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows NTFS Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows NTFS allows an unauthorized attacker to execute code over a network.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Storage Spaces Controller Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Storage Spaces Controller allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows COM+ Event System Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
-
High 8.2
Windows Hyper-V Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Servicing Stack Updates Elevation of Privilege Vulnerability
Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Print Spooler Components Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Print Spooler Components Elevation of Privilege Vulnerability
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Device Association Service Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Graphics Kernel Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Graphics Kernel Elevation of Privilege Vulnerability
Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Audio Service Elevation of Privilege Vulnerability
Inclusion of functionality from untrusted control sphere in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Installer Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.