CLSA-2026-1790071074 nautilus: Fix of CVE-2022-37290

CVE-2022-37290: fix NULL pointer dereference and crash in getbasename when basename is NULL...

NotepadPlusPlus: CVE-2026-86056: NULL Pointer Dereference

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPMSAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV) . The flaw is triggered when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can exploit this by providing a specially crafted input file , which res...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-86056: NULL Pointer Dereference

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPMSAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

PT-2026-96853

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.8 Description The NPPM SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: yasm (UTSA-2023-002669)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002669 advisory. Yasm v1.3.0.78 was found prone to NULL Pointer Dereference in /libyasm/intnum.c and /elf/elf.c, which allows the attacker to cause a denial of service via a crafted...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002319)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002319 advisory. A null pointer dereference issue was discovered in function guix11createblankmouse in guix11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000529)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000529 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0259. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gnutls (UTSA-2022-001364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-001364 advisory. A NULL pointer dereference flaw was found in GnuTLS. As Nettle's hash update functions internally call memcpy, providing zero-length input may cause undefined...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000531)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000531 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0240. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000533 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mutt (UTSA-2023-002883)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002883 advisory. Null pointer dereference when composing from a specially crafted draft message in Mutt 1.5.2 1.5.2 2.2.12 Tenable has extracted the preceding description block...

PT-2026-96940

Name of the Vulnerable Software and Affected Versions InDesign Desktop affected versions not specified Description InDesign Desktop contains a NULL Pointer Dereference issue, which occurs when the software attempts to read a memory location that is null, causing the program to crash. This can lea...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002315 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Tenable has extracted the preceding description block directly from the Unity Linux security...

RockyLinux 9 : gstreamer1-plugins-base (RLSA-2026:69100)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69100 advisory. gstreamer: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow CVE-2026-18297 gstreamer1-plugins-base: gstreamer:...