CVE-2026-109107

A null pointer dereference vulnerability exists in the Wavlink WL-WN592AX6 (version 250422) device. The flaw is located within the main function of the /cgi-bin/upload.cgi file and is triggered by the manipulation of the Cookie argument. This issue can be exploited remotely to impact the system. ...

CVE-2026-104004: NULL Pointer Dereference

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...

PT-2026-112431

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A null pointer dereference in the Windows Audio Service allows an authorized attacker to disclose sensitive information locally and affect the system. A null pointer dereference...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libde265 vulnerability (USN-8909-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8909-1 advisory. It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791915424)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791915424 advisory. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs...

CVE-2026-109107: NULL Pointer Dereference

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CVE-2026-70248: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

PT-2026-113296

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

Microsoft Windows: CVE-2026-83571: Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-103852: NULL Pointer Dereference

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction...

PT-2026-112906

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A null pointer dereference occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A null pointer dereference is a software error where the...

Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-103855: NULL Pointer Dereference

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

CVE-2026-104343: NULL Pointer Dereference

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

PT-2026-113155

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A null pointer dereference in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute arbitrary code...

CVE-2026-77206: NULL Pointer Dereference

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

PT-2026-113537

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT PKCS7 WRAPPED X509, it guards the PKCS7 blob with SEC PKCS7ContainsCertsOrCrls and then iterates the certificate list with SEC...

CVE-2026-77207: NULL Pointer Dereference

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

CVE-2026-88079: NULL Pointer Dereference

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-112820

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A null pointer dereference in the Windows Message Queuing Queue Manager allows an authorized attacker to cause a denial of service over a network. A null pointer...