CWE-822 非可信指针解引用 类弱点 268 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-822 属于不信任指针解引用漏洞，指程序将不可信来源的值转换为指针并直接解引用。攻击者通过构造恶意指针，指向非预期的内存位置，若用于写入操作，可导致关键状态变量被篡改、程序崩溃或远程代码执行。开发者应严格验证指针来源，确保其指向合法且受控的内存区域，避免直接解引用外部输入数据，从而消除此类安全风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-83848 | Windows COM+ 事件系统提权漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-10-13 |
| CVE-2026-83826 | Windows 错误报告 提权漏洞 — Windows 11 version 23H2 | 7.8 | High | 2026-10-13 |
| CVE-2026-70104 | Windows Win32k 提权漏洞 — Windows 10 Version 1809 | 7.8 | High | 2026-10-13 |
| CVE-2026-69850 | Windows 证书权限提升漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-10-13 |
| CVE-2026-105723 | Windows DFS 权限提升漏洞 — Windows 10 Version 1607 | 7.5 | High | 2026-10-13 |
| CVE-2026-96393 | Affinity 3.3.1前越界指针解引用致崩溃 — affinity | 3.6 | Low | 2026-10-09 |
| CVE-2026-43598 | AMD ROCm RCCL输入验证漏洞致RCE — AMD Instinct™ MI210 | 7.7 | High | 2026-10-06 |
| CVE-2026-57545 | Graphics 组件未受信指针解引用漏洞 — Snapdragon | 7.8 | High | 2026-10-06 |
| CVE-2026-19185 | I3C do_ccc 系统调用未验证缓冲区指针导致内核内存读写漏洞 — zephyr | 7.8 | High | 2026-10-05 |
| CVE-2026-97876 | GRUB Secure Boot绕过漏洞 — grub2 | 6.4 | Medium | 2026-10-02 |
| CVE-2026-103764 | Mooncake 0.3.13 前 TCP传输未授权内存读写漏洞 — Mooncake | 9.8 | Critical | 2026-10-01 |
| CVE-2026-58007 | EL3安全内存损坏：未验证SDM邮箱响应地址 — Trusted Firmware | 8.1 | High | 2026-09-24 |
| CVE-2026-58006 | Altera SoCFPGA BL31邮箱输出指针验证漏洞导致EL3安全内存损坏 — Trusted Firmware | 8.1 | High | 2026-09-24 |
| CVE-2026-91795 | Foxit PDF Editor/Reader 远程代码执行漏洞 — Foxit PDF Editor | 7.8 | High | 2026-09-23 |
| CVE-2026-94403 | ColorFul iGameCenter 驱动内核指针解引用漏洞 — iGameCenter | 8.8 | High | 2026-09-21 |
| CVE-2026-25261 | 相机模块不可信指针解引用漏洞 — Snapdragon | 6.7 | Medium | 2026-09-17 |
| CVE-2025-59607 | Windows Compute 不可信指针引用漏洞 — Snapdragon | 7.8 | High | 2026-09-17 |
| CVE-2026-90890 | 华硕 ASRock Polychrome 指针解引用漏洞 — ASRock Polychrome SYNC/RGB for MB | 5.5 | Medium | 2026-09-14 |
| CVE-2026-33964 | SAMSUNG Exynos 1580 缓冲区错误漏洞 — Exynos 1580 firmware | 6.4 | Medium | 2026-09-14 |
| CVE-2026-83498 | Microsoft Windows Virtualization-Based Security 缓冲区错误漏洞 — Windows 11 version 23H2 | 7.8 | High | 2026-09-08 |
| CVE-2026-83939 | Microsoft Windows Secure Kernel Mode 缓冲区错误漏洞 — Windows 11 version 26H1 | 8.2 | High | 2026-09-08 |
| CVE-2026-78451 | Microsoft Windows SCSI Class System File 缓冲区错误漏洞 — Windows 10 Version 1809 | 6.8 | Medium | 2026-09-08 |
| CVE-2026-78444 | Microsoft Windows Failover Cluster 缓冲区错误漏洞 — Windows 10 Version 1809 | 8.1 | High | 2026-09-08 |
| CVE-2026-72956 | Microsoft Office PowerPoint 缓冲区错误漏洞 — Microsoft 365 Apps for Enterprise | 6.5 | Medium | 2026-09-08 |
| CVE-2026-69874 | Microsoft Windows ALPC 缓冲区错误漏洞 — Windows 10 Version 1809 | 8.2 | High | 2026-09-08 |
| CVE-2026-69900 | Microsoft Kernel Streaming WOW Thunk Service Driver 缓冲区错误漏洞 — Windows 10 Version 21H2 | 7.8 | High | 2026-09-08 |
| CVE-2026-69569 | Microsoft Windows Print Spooler Components 缓冲区错误漏洞 — Windows 10 Version 1607 | 5.7 | Medium | 2026-09-08 |
| CVE-2026-69475 | Microsoft Windows Remote Desktop Services 缓冲区错误漏洞 — Windows 10 Version 1607 | 7.8 | High | 2026-09-08 |
| CVE-2026-80083 | Microsoft Hyper-V 缓冲区错误漏洞 — Windows 11 version 23H2 | 8.8 | High | 2026-09-08 |
| CVE-2026-67378 | Microsoft SQL Server 缓冲区错误漏洞 — Microsoft SQL Server 2019 (CU 32) | 9.0 | Critical | 2026-09-08 |
CWE-822（非可信指针解引用） 是常见的弱点类别，本平台收录该类弱点关联的 268 条 CVE 漏洞。