CWE-822 · Memory Corruption
Untrusted Pointer Dereference
333CVEs
SortMost likely exploited
333 CVEs with CWE-822 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-21338In CISA KEVExploitedWindows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2024-02-13 | 7.8 | 62% | 2024-02-13 |
| CVE-2024-35250In CISA KEVExploitedWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2024-06-11 | 7.8 | 25% | 2024-06-11 |
| CVE-2023-29360In CISA KEVExploitedMicrosoft Streaming Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.4 · 2023-06-13 | 8.4 | 22% | 2023-06-13 |
| CVE-2023-36033In CISA KEVExploitedWindows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.8 · 2023-11-14 | 7.8 | 11% | 2023-11-14 |
| CVE-2025-24990In CISA KEVExploitedWindows Agere Modem Driver Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.8 · 2025-10-14 | 7.8 | 7.9% | 2025-10-14 |
| CVE-2023-21768Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2022 · CVSS 7.8 · 2023-01-10 | 7.8 | 65% | 2023-01-10 |
| CVE-2025-50165Windows Graphics Component Remote Code Execution VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 9.8 · 2025-08-12 | 9.8 | 15% | 2025-08-12 |
| CVE-2019-13334This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulner…Foxit · PhantomPDF · CVSS 7.8 · 2020-02-07 | 7.8 | 6.8% | 2020-02-07 |
| CVE-2018-17893LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution.LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA… · LAquis SCADA · 2018-10-17 | – | 6.4% | 2018-10-17 |
| CVE-2026-40369Windows Kernel Elevation of Privilege VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 7.8 · 2026-05-12 | 7.8 | 4.7% | 2026-05-12 |
| CVE-2024-43629Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft · Windows Server 2025 · CVSS 7.8 · 2024-11-12 | 7.8 | 4.4% | 2024-11-12 |
| CVE-2020-26991A vulnerability has been identified in JT2Go (All versions < V13.1.0.2), Teamcenter Visualization (All versions < V13.1.0.2). Affected applications lack proper validation of user-…Siemens · JT2Go · 2021-01-12 | – | 4.2% | 2021-01-12 |
| CVE-2024-21346Win32k Elevation of Privilege VulnerabilityMicrosoft · Windows 11 version 21H2 · CVSS 7.8 · 2024-02-13 | 7.8 | 4.1% | 2024-02-13 |
| CVE-2018-14811Fuji Electric V-Server 4.0.3.0 and prior, Multiple untrusted pointer dereference vulnerabilities have been identified, which may allow remote code execution.Fuji Electric · V-Server · 2018-09-26 | – | 3.6% | 2018-09-26 |
| CVE-2024-26254Microsoft Virtual Machine Bus (VMBus) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-04-09 | 7.5 | 3.1% | 2024-04-09 |
| CVE-2017-12719An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer wi…Advantech · Advantech WebAccess · 2017-11-06 | – | 3.1% | 2017-11-06 |
| CVE-2023-1437CVE-2023-1437Advantech · WebAccess/SCADA · CVSS 9.8 · 2023-08-02 | 9.8 | 2.8% | 2023-08-02 |
| CVE-2018-7497In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior…Advantech · WebAccess · 2018-05-15 | – | 2.8% | 2018-05-15 |
| CVE-2020-27259Omron CX-OneOmron · CX-One · 2021-02-09 | – | 2.8% | 2021-02-09 |
| CVE-2018-19029LCDS Laquis SCADA prior to version 4.1.0.4150 allows an attacker using a specially crafted project file to supply a pointer for a controlled memory address, which may allow remote…LCDS · LCDS Laquis SCADA · 2019-02-05 | – | 2.7% | 2019-02-05 |
| CVE-2020-27277Delta Electronics DOPSoft Version 4.0.8.21 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.Deltaww · Delta Electronics · 2021-01-11 | – | 2.3% | 2021-01-11 |
| CVE-2021-22649Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10…Luxion · Luxion KeyShot · 2021-02-23 | – | 2.2% | 2021-02-23 |
| CVE-2023-21677Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-01-10 | 7.5 | 2.1% | 2023-01-10 |
| CVE-2023-36596Remote Procedure Call Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-10-10 | 7.5 | 2.1% | 2023-10-10 |
| CVE-2017-16728An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to 8.3. There are multiple vulnerabilities that may allow an attacker to cause the prog…Advantech · Advantech WebAccess · 2018-01-05 | – | 2.1% | 2018-01-05 |
| CVE-2024-20680Windows Message Queuing Client (MSMQC) Information DisclosureMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2024-01-09 | 6.5 | 2.0% | 2024-01-09 |
| CVE-2021-27496Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied…Luxion · Datakit Software libraries embedded in Luxion KeyShot software · 2021-05-27 | – | 2.0% | 2021-05-27 |
| CVE-2024-20664Microsoft Message Queuing Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2024-01-09 | 6.5 | 2.0% | 2024-01-09 |
| CVE-2020-27289Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code.Deltaww · Delta Electronics · 2021-01-11 | – | 2.0% | 2021-01-11 |
| CVE-2024-30090Microsoft Streaming Service Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7 · 2024-06-11 | 7.0 | 2.0% | 2024-06-11 |
| CVE-2025-60719Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7 · 2025-11-11 | 7.0 | 1.9% | 2025-11-11 |
| CVE-2024-20663Windows Message Queuing Client (MSMQC) Information DisclosureMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2024-01-09 | 6.5 | 1.9% | 2024-01-09 |
| CVE-2024-43624Windows Hyper-V Shared Virtual Disk Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-11-12 | 8.8 | 1.8% | 2024-11-12 |
| CVE-2024-38104Windows Fax Service Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-07-09 | 8.8 | 1.8% | 2024-07-09 |
| CVE-2024-37340Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityMicrosoft · Microsoft SQL Server 2017 (CU 31) · CVSS 8.8 · 2024-09-10 | 8.8 | 1.6% | 2024-09-10 |
| CVE-2024-37339Microsoft SQL Server Native Scoring Remote Code Execution VulnerabilityMicrosoft · Microsoft SQL Server 2017 (CU 31) · CVSS 8.8 · 2024-09-10 | 8.8 | 1.6% | 2024-09-10 |
| CVE-2021-31504This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). User interaction is…OpenText · Brava! Desktop · CVSS 7.8 · 2021-08-03 | 7.8 | 1.4% | 2021-08-03 |
| CVE-2021-31500This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this v…OpenText · Brava! Desktop · CVSS 7.8 · 2021-06-15 | 7.8 | 1.4% | 2021-06-15 |
| CVE-2021-31481This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop 16.6.3.84. User interaction is required to exploit this v…OpenText · Brava! Desktop · CVSS 7.8 · 2021-06-15 | 7.8 | 1.4% | 2021-06-15 |
| CVE-2025-62549Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.8 · 2025-12-09 | 8.8 | 1.4% | 2025-12-09 |
| CVE-2024-37969Secure Boot Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8 · 2024-07-09 | 8.0 | 1.4% | 2024-07-09 |
| CVE-2020-27288An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to craft a special project file that may pe…Deltaww · TPEditor · 2021-01-26 | – | 1.3% | 2021-01-26 |
| CVE-2026-105723Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.5 · 2026-10-13 | 7.5 | 1.3% | 2026-10-13 |
| CVE-2026-70170Windows Kernel Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.5 · 2026-10-13 | 6.5 | 1.2% | 2026-10-13 |
| CVE-2020-1899The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed…Facebook · HHVM · 2021-03-11 | – | 1.2% | 2021-03-11 |
| CVE-2026-50424Windows Domain Controller Denial of Service VulnerabilityMicrosoft · Windows 11 Version 24H2 · CVSS 7.5 · 2026-07-14 | 7.5 | 1.2% | 2026-07-14 |
| CVE-2026-112795Windows Security Account Manager Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.5 · 2026-11-10 | 6.5 | 1.1% | 2026-11-10 |
| CVE-2025-21381Microsoft Excel Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2025-02-11 | 7.8 | 1.1% | 2025-02-11 |
| CVE-2018-12548In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives which accept pointer values that are derefer…The Eclipse Foundation · Eclipse OpenJ9 · 2019-01-31 | – | 1.1% | 2019-01-31 |
| CVE-2026-70300Microsoft Office Word Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 9.8 · 2026-10-13 | 9.8 | 1.1% | 2026-10-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.