CWE-822— Untrusted Pointer Dereference

An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to execute code to dereference a pointer within the program causing the application to become unavailab…

NT OS Kernel Elevation of Privilege Vulnerability

A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to es…

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating pr…

A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and k…

IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service.

Windows Print Spooler Elevation of Privilege Vulnerability

Memory corruption in video while parsing invalid mp2 clip.

An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availabilit…

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read…

Untrusted pointer dereference in Windows SMB Client allows an authorized attacker to elevate privileges locally.

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Connection Manager Service allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a preempted user-mode module thread's registers in privileged mode at addresses taken from the thread's stack pointer, without ch…

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

Microsoft Streaming Service Elevation of Privilege Vulnerability

Microsoft Brokering File System Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows File Server Resource Management Service allows an unauthorized attacker to elevate privileges with a physical attack.