CVE-2026-70575

CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...

EUVD-2026-73652

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-69881

CVE-2026-69881 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, network-based attacker to trigger a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H , meaning the impact is limited...

EUVD-2026-73563

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

EUVD-2026-73473

Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...

CVE-2026-69384

A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...

EUVD-2026-73371

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-62762

CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...

CVE-2026-72949

CVE-2026-72949 is a null pointer dereference in the Windows SMB Server Network Transport Driver (srvnet.sys) that allows an unauthorized, network-based attacker to cause a denial of service . The Microsoft-assigned CVSS 3.1 score is 7.5 (HIGH) , reflecting low attack complexity, no required privi...

EUVD-2026-73344

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

CVE-2026-77489

CVE-2026-77489 is a null pointer dereference in Windows Biometric Service that allows an authorized local attacker to elevate privileges. The flaw carries a CVSS 3.1 score of 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, meaning exploitation requires only low privileges and no ...

EUVD-2026-73262

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73109

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

CVE-2026-72939

CVE-2026-72939 is a null pointer dereference in Windows Routing and Remote Access Service (RRAS) that allows an authorized attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H , indicating a network-attackable fla...

EUVD-2026-73054

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Windows Kerberos is affected by a null pointer dereference that allows an unauthenticated attacker to trigger a denial of service over a network . The CVSS 3.1 score is 7.5 (HIGH) , with the vector indicating low attack complexity, no privileges required, and no user interaction. The primary impa...

EUVD-2026-73024

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69587

CVE-2026-69587 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, remote attacker to cause a denial of service . The vulnerability is reachable over the network with low attack complexity , requires no privileges and no user interact...

CVE-2026-84392

A NULL Pointer Dereference (CWE-476) in Fortinet FortiOS (7.2 all, 7.4 all), FortiPAM (1.0 through 1.9.0), and FortiProxy (7.2 all, 7.4 all, 7.6.0–7.6.6) allows an authenticated attacker to crash the httpsd daemon via crafted HTTP requests. The CVSS 3.1 score is 2.7 (Low) , reflecting high privil...

EUVD-2026-72930

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...