CVE-2026-69978

A null pointer dereference vulnerability exists in Windows VMSwitch . This flaw allows an authorized attacker to cause a local denial of service (DoS). The vulnerability is associated with CWE-476 . While the documents confirm the existence of the flaw and its impact on availability, no specific ...

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-70566

A null pointer dereference vulnerability exists in Windows Schannel , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-476 . While the specific component or file is not detailed in the provided documents, the impact is rate...

CVE-2026-104343

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability (CWE-476) that can result in an application denial-of-service . An attacker can exploit this issue to crash the application, but it requires user interaction where a victim must open a malicious file . No specific exploit de...

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

CVE-2026-77095

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...

CVE-2026-90250

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup storage mechanism. When replacing an existing BPF program with a new one that uses BPFMAPTYPEPERCPUCGROUPSTORAGE, the system may fail to properly allocate and assign the necessary cgroup storage. This oversight can lead to a...

CVE-2026-90228

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker can trigger a NULL pointer dereference by issuing a specific Identify command CNS 05h, CSI 02h ZNS targeting a file-backed namespace. This vulnerability occurs because the system attempts to access a block device that does...

CVE-2026-90280

A flaw was found in the Linux kernel's qcom qmp-usb physical layer PHY driver. A local attacker could trigger a null pointer dereference by re-enabling runtime power management via a sysfs attribute before the PHY is fully initialized. This can lead to a system crash, resulting in a Denial of...

CVE-2026-90335

A flaw was found in the Linux kernel's handling of TTY devices. When a TTY device registration fails before a character device cdev is allocated, the serial core retains the port. Subsequent removal of this port can lead to a null-pointer dereference if cdevdel is called with a NULL cdev slot. Th...

CVE-2026-90294

A flaw was found in the Linux kernel. The iSER iSCSI Extensions for RDMA protocol implementation incorrectly sends a login response before the session is fully registered. A remote attacker could exploit this by sending a SCSI command immediately after receiving the premature login response. This...

CVE-2026-90186

A flaw was found in the Linux kernel's nullblk module. A local user can cause a system crash by attempting to resize device queues while a shared tag set is active. This improper handling of queue resizing leads to a null pointer dereference, which can result in a denial of service...

CVE-2026-90144

A flaw was found in the Linux kernel's dpll Digital Phase-Locked Loop subsystem. A race condition during device teardown, specifically when a dpll device unregisters while another driver still holds a pin, can lead to a NULL pointer dereference. This issue can cause a kernel crash, resulting in a...

CVE-2026-90192

A flaw was found in the Linux kernel's qcom-cpucp mailbox driver. The qcomcpucpmboxsenddata function, responsible for sending data, did not properly handle a NULL data pointer when mailboxclearchannel attempted to notify the remote side that the receive RX channel was cleared. This blind...

CVE-2026-90172

A flaw was found in the Linux kernel's smbdirect module, which handles high-performance data transfer using Remote Direct Memory Access RDMA. During an RDMA connection attempt, if the connection acceptance fails, the system incorrectly deallocates memory resources before all related operations ar...

CVE-2026-90166

A flaw was found in the ksmbd Server Message Block server component of the Linux kernel. A remote attacker could exploit a null-pointer dereference vulnerability within the ksmbdipctreeconnectrequest function. This issue arises when the system attempts to access a memory location that has not bee...

CVE-2026-90164

A flaw was found in the Linux kernel's ksmbd server component. During the server's initialization process, an error in setting up internal process entries or counters is not handled correctly. This oversight can result in the system attempting to access a null pointer, which may lead to a system...

CVE-2026-90149

A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles implementation. When an NFSv4.0 data server is used, two code paths incorrectly assume the client has a session, leading to a NULL pointer dereference. This issue can cause the kernel to crash, resulting in a...

CVE-2026-90148

A flaw was found in the Linux kernel's NFSv4 component. When the nfs4addlease function races with a delegation return, it can pass an incorrect, potentially null, argument to nfs4deletelease. This incorrect argument eventually leads to a null pointer dereference, which could allow a local attacke...

CVE-2026-77095 CvFWD Null Pointer Dereference

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...