34863 matches found
CVE-2026-86547 mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...
CVE-2026-86547 mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER
mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
389-ds:1.4 security, bug fix, and enhancement update
An update is available for module.389-ds-base, 389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...
RLSA-2026:64791 Critical: 389-ds:1.4 security, bug fix, and enhancement update
389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...
Linux Distros Unpatched Vulnerability : CVE-2026-82055
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted...
PT-2026-89677
This update for strongswan fixes the following issues: - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-106775)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106775 advisory. FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in...
PT-2026-89087
In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pci ecam create maps each bus segment separately and relies on the -add bus callback p...
openSUSE 16 Security Update : libusb-1_0 (openSUSE-SU-2026:21783-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21783-1 advisory. - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration...
RockyLinux 9 : 389-ds-base (RLSA-2026:64784)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64784 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...
PT-2026-89674
This update for strongswan fixes the following issues: - CVE-2026-47895: Double-Free When Destroying Certain Cloned Identities bsc1266360. - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7...
RockyLinux 8 : 389-ds:1.4 (RLSA-2026:64791)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64791 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...
CVE-2026-86141
A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...
CVE-2026-73502
A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a null-pointer dereference in the openapi3filter.ValidateRequest function. This occurs when validating a request against a content parameter whose application/json media type has no schema. Successful exploitation lea...
CVE-2026-66303
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
EUVD-2026-73940
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-66303
CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...