CVE-2026-103828: NULL Pointer Dereference

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

CVE-2026-104343: NULL Pointer Dereference

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

EUVD-2026-98803

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

PT-2026-112431

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A null pointer dereference in the Windows Audio Service allows an authorized attacker to disclose sensitive information locally and affect the system. A null pointer dereference...

PT-2026-111534

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update read cache bitmap v3 order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3 DO NOT CACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or...

PT-2026-111301

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CVE-2026-103855: NULL Pointer Dereference

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

PT-2026-113536

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description A null pointer dereference exists in the IKEv2 state machine within the EAP handling code for authentication. Due to an inconsistency in the state machine code, a fall-through occurs where...

PT-2026-122246

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

PT-2026-122247

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT PKCS7 WRAPPED X509, it guards the PKCS7 blob with SEC PKCS7ContainsCertsOrCrls and then iterates the certificate list with SEC...

Ubuntu 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8879-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8879-1 advisory. It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null...

CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791852988)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791852988 advisory. - In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The...

PT-2026-113537

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description A null pointer dereference exists in the PKCS7 handling code used for IKE certificate authentication. The issue occurs when decoding an IKE CERT payload of type CERT PKCS7 WRAPPED X509. The...

CVE-2026-103852: NULL Pointer Dereference

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction...

CVE-2026-103829: NULL Pointer Dereference

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

CVE-2026-83636: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-83665: NULL Pointer Dereference

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-85859: NULL Pointer Dereference

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...

CVE-2026-88076: NULL Pointer Dereference

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83571: Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...