CWE-822— Untrusted Pointer Dereference
The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.— MITRE CWE catalog
212 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-822page 5 of 5
- CVE-2026-48137CRITICALCVSS 9.8EG 9.82026-06-19
There is an untrusted pointer dereference vulnerability in the NI grpc-device sideband streaming API that may allow an attacker to cause an arbitrary memory dereference, potentially resulting in remote code execution. Successful exploita…
- CVE-2026-48340HIGHCVSS 7.8EG 7.82026-07-14
Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malici…
- CVE-2026-48580MEDIUMCVSS 5.5EG 5.52026-07-14
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-50367HIGHCVSS 7.8EG 7.82026-07-14
Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-50382HIGHCVSS 8.8EG 8.82026-07-14
Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.
- CVE-2026-50424HIGHCVSS 7.5EG 7.52026-07-14
Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.
- CVE-2026-50441HIGHCVSS 7.8EG 7.82026-07-14
Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
- CVE-2026-50479HIGHCVSS 7.8EG 7.82026-07-14
Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.
- CVE-2026-55136HIGHCVSS 7.8EG 7.82026-07-14
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- CVE-2026-55138MEDIUMCVSS 5.5EG 5.52026-07-14
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
- CVE-2026-58596HIGHCVSS 8.3EG 8.32026-07-12
Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-8835HIGHCVSS 7.3EG 7.32026-05-26
IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.
Map vulnerabilities like CWE-822 to your infrastructure
EchelonGraph correlates every CVE — across CWE-822 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Start Free Scan →