Falhas do tipo CWE-822

308 resultados

Desreferência de ponteiro não confiável

Ocorre quando o código desreferencia um ponteiro cujo valor veio de uma fonte externa (entrada do usuário, rede, arquivo) sem validação prévia. Um atacante pode fornecer um endereço de memória inválido ou malicioso, causando crash, leitura de dados sensíveis ou execução de código arbitrário.

Exemplo

Um aplicativo recebe um offset de memória via requisição HTTP, converte para ponteiro e acessa dados sem verificar se o endereço é válido: int *ptr = (int *)user_input; int valor = *ptr;. O atacante fornece um endereço inválido ou que aponta para região protegida.

Como mitigar

Nunca confie em ponteiros ou endereços vindos de entrada externa. Se necessário, use estruturas de dados gerenciadas (arrays, listas), validação rigorosa de limites, ou isolamento via sandboxing. Em linguagens modernas (C++, Rust), prefira smart pointers e verificações em tempo de compilação.

CVE-2024-37969HIGHSecure Boot Security Feature Bypass VulnerabilityEPSS 1.4%CVE-2020-27288—An untrusted pointer dereference has been identified in the way TPEditor(v1.98 and prior) processes project files, allowing an attacker to cEPSS 1.3%CVE-2026-105723HIGHWindows Distributed File System (DFS) Elevation of Privilege VulnerabilityEPSS 1.3%CVE-2025-62549HIGHWindows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityEPSS 1.3%CVE-2026-70170MEDIUMWindows Kernel Denial of Service VulnerabilityEPSS 1.2%CVE-2020-1899—The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arEPSS 1.2%CVE-2026-50424HIGHWindows Domain Controller Denial of Service VulnerabilityEPSS 1.2%CVE-2025-21381HIGHMicrosoft Excel Remote Code Execution VulnerabilityEPSS 1.1%CVE-2018-12548—In OpenJDK + Eclipse OpenJ9 version 0.11.0 builds, the public jdk.crypto.jniprovider.NativeCrypto class contains public static natives whichEPSS 1.1%CVE-2026-70300CRITICALMicrosoft Office Word Remote Code Execution VulnerabilityEPSS 1.1%CVE-2024-38187HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2024-38185HIGHWindows Kernel-Mode Driver Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2026-21250HIGHWindows HTTP.sys Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2024-49090HIGHWindows Common Log File System Driver Elevation of Privilege VulnerabilityEPSS 1.1%CVE-2020-26997—A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid EEPSS 1.0%CVE-2022-22514HIGHUntrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.EPSS 1.0%CVE-2026-96924CRITICALWindows OLE Remote Code Execution VulnerabilityEPSS 1.0%CVE-2026-70167HIGHWindows Domain Name Service Remote Code Execution VulnerabilityEPSS 1.0%CVE-2023-36045HIGHMicrosoft Office Graphics Remote Code Execution VulnerabilityEPSS 1.0%CVE-2021-38401HIGHFuji Electric Tellus Lite V-Simulator untrusted pointer dereferenceEPSS 1.0%