Threats Tagged 'cwe-822'

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack.

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

CVE-2026-69900 is a high-severity vulnerability in Microsoft Windows 10 Version 21H2 involving an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver. This flaw allows an authorized local attacker to elevate privileges. An official fix is available from Microsoft to address this issue.

CVE-2026-69874 is a high-severity vulnerability in Microsoft Windows 10 Version 1809 involving an untrusted pointer dereference in the Windows ALPC component. This flaw allows an authorized local attacker to elevate privileges. An official fix is available from Microsoft to address this issue.

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.