Threats Tagged 'cwe-822'

CVE-2026-19442 is a high-severity vulnerability in IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 involving a pointer validation flaw in the AIX Virtual SCSI (vSCSI) initiator driver. Exploiting this flaw can lead to denial of service, privilege escalation, or full compromise of the client LPAR kernel.

CVE-2026-18840 is a high severity vulnerability affecting IBM AIX versions 7.2 and 7.3, as well as IBM PowerVM VIOS 4.1. It involves improper validation of an attacker-controlled pointer, which could allow a local attacker with high privileges to execute arbitrary code. The vulnerability is classified under CWE-822 (Untrusted Pointer Dereference). There is no official patch or remediation level currently provided by the vendor. No known exploits are reported in the wild at this time.

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the '  Security Update for ASUS GPU Tweak III, GPU Tweak II, AI Suite 3, and Armoury Crate Security Bulletin   ' section on the ASUS Security Advisory for more information.

A maliciously crafted BMP file, when parsed through certain Autodesk products, can force a Untrusted Pointer Dereference vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process.

CVE-2026-45198 is a high severity vulnerability in Imagination Technologies Graphics DDK where GPU firmware may use pointers from non-secure memory controlled by the Rich Execution Environment (REE). This allows an attacker with REE kernel control to modify pointer values, potentially corrupting GPU firmware data. The flaw involves untrusted pointer dereference and trust boundary violation between secure and non-secure memory regions.