CWE-822 · weakness in Memory Corruption
Untrusted Pointer Dereference
333 CVEs · 5 exploited
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 5
- likely to be exploited
- 2
Every one of the 333 is a mark on the map. Named now: 1 to 26, most at risk first.
- Windows Kernel Elevation of Privilege Vulnerability
- Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
- Microsoft Streaming Service Elevation of Privilege Vulnerability
- Windows DWM Core Library Elevation of Privilege Vulnerability
- Windows Agere Modem Driver Elevation of Privilege Vulnerability
- Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- Windows Graphics Component Remote Code Execution Vulnerability
- This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulner…
- LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.
- Windows Kernel Elevation of Privilege Vulnerability
- Windows DWM Core Library Elevation of Privilege Vulnerability
- A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-…
- Win32k Elevation of Privilege Vulnerability
- Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution.
- Microsoft Virtual Machine Bus (VMBus) Denial of Service Vulnerability
- An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer wi…
- CVE-2023-1437
- In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…
- Omron CX-One
- LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote…
- Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.
- Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10…
- Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- Remote Procedure Call Information Disclosure Vulnerability
- An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the prog…
- Windows Message Queuing Client (MSMQC) Information Disclosure
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.