Class familyMicrosoft · Windows
Microsoft Windows untrusted Pointer Dereference flaws, 2023–2025
24 Windows CVEs with CWE-822 weaknesses, 10 Jan 2023 to 14 Oct 2025. 4 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2023’23
17 2024’24
4 2025’25
In CISA KEVNot in KEV
20233 CVEs, 1 in KEV
202417 CVEs, 2 in KEV
20254 CVEs, 1 in KEV
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2023-21768 | 10 Jan 2023 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability | Grouped by weakness | 66.7 |
| CVE-2023-36033KEV | 14 Nov 2023 | Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability | Grouped by weakness | 62.6 |
| CVE-2023-36011 | 12 Dec 2023 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 16.1 |
| CVE-2024-21338KEV | 13 Feb 2024 | Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability | Grouped by weakness | 78.3 |
| CVE-2024-21346 | 13 Feb 2024 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 23.6 |
| CVE-2024-26213 | 9 Apr 2024 | Microsoft Brokering File System Elevation of Privilege Vulnerability | Grouped by weakness | 14.4 |
| CVE-2024-30090 | 11 Jun 2024 | Microsoft Streaming Service Elevation of Privilege Vulnerability | Grouped by weakness | 71.7 |
| CVE-2024-35250KEV | 11 Jun 2024 | Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability | Grouped by weakness | 68.0 |
| CVE-2024-38185 | 13 Aug 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Grouped by weakness | 18.7 |
| CVE-2024-38187 | 13 Aug 2024 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability | Grouped by weakness | 18.7 |
| CVE-2024-37979 | 8 Oct 2024 | Windows Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 14.2 |
| CVE-2024-43516 | 8 Oct 2024 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Grouped by weakness | 15.4 |
| CVE-2024-43529 | 8 Oct 2024 | Windows Print Spooler Elevation of Privilege Vulnerability | Grouped by weakness | 16.6 |
| CVE-2024-43553 | 8 Oct 2024 | NT OS Kernel Elevation of Privilege Vulnerability | Grouped by weakness | 13.7 |
| CVE-2024-43624 | 12 Nov 2024 | Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability | Grouped by weakness | 22.0 |
| CVE-2024-43629 | 12 Nov 2024 | Windows DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 23.7 |
| CVE-2024-43631 | 12 Nov 2024 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2024-43636 | 12 Nov 2024 | Win32k Elevation of Privilege Vulnerability | Grouped by weakness | 16.0 |
| CVE-2024-43646 | 12 Nov 2024 | Windows Secure Kernel Mode Elevation of Privilege Vulnerability | Grouped by weakness | 13.8 |
| CVE-2024-49090 | 10 Dec 2024 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | Grouped by weakness | 18.4 |
| CVE-2025-21358 | 11 Feb 2025 | Windows Core Messaging Elevation of Privileges Vulnerability | Grouped by weakness | 16.5 |
| CVE-2025-53801 | 9 Sep 2025 | Microsoft DWM Core Library Elevation of Privilege Vulnerability | Grouped by weakness | 13.3 |
| CVE-2025-24990KEV | 14 Oct 2025 | Microsoft Windows Untrusted Pointer Dereference Vulnerability | Grouped by weakness | 67.2 |
| CVE-2025-55681 | 14 Oct 2025 | Desktop Window Manager Elevation of Privilege Vulnerability | Grouped by weakness | 23.4 |