CVE-2026-76927

A crash in the H.245 protocol dissector of Wireshark allows denial of service. Per the FSTEC BDU entry, the flaw is related to pointer handling in the dissector. Affected versions are 4.6.0–4.6.7 and 4.4.0–4.4.18 . The NVD assigns CVSS 3.1 7.5 (HIGH) with a network attack vector, while the CNA (G...

CVE-2026-76927 NULL Pointer Dereference in Wireshark

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927 NULL Pointer Dereference in Wireshark

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927 NULL Pointer Dereference in Wireshark

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922 NULL Pointer Dereference in Wireshark

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922 NULL Pointer Dereference in Wireshark

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922 NULL Pointer Dereference in Wireshark

Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76922

Wireshark's Bluetooth BR/EDR FHS protocol dissector has a null pointer dereference causing a crash (DoS). Affected versions: 4.4.0–4.4.18 and 4.6.0–4.6.7. CVSS 5.5 (medium). No exploitation details provided. Upgrade to a patched version. See wnpa-sec-2026-80 for details.

CVE-2026-76881 NULL Pointer Dereference in Wireshark

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76881 NULL Pointer Dereference in Wireshark

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76881

Wireshark's CMS protocol dissector crashes via a null pointer dereference in versions 4.6.0–4.6.7 and 4.4.0–4.4.18, enabling denial of service. CVSS 4.7 (MEDIUM) requires local access and user interaction. Fix: upgrade to 4.6.8 or 4.4.19 per wnpa-sec-2026-76. No exploitation details provided.

CVE-2026-16846

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-74263

A flaw was found in the Linux kernel's Wireless Wide Area Network WWAN t7xx driver. The t7xxportctrltx function, which handles control transmissions, fails to validate the return value of skbclone. An attacker with local access could exploit this by triggering a scenario where skbclone returns a...

CVE-2026-16846

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a null pointer dereference, enabling a remote, low-complexity denial of service (CVSS 6.5 MEDIUM, adjacent network vector). No patch or workaround details are provided in the documents; monitor IBM support for remediation guidance.

CVE-2026-16846 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

EUVD-2026-62736

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-16829

IBM AIX 7.2/7.3 and PowerVM VIOS 4.1 are vulnerable to a NULL pointer dereference exploitable by an adjacent-network attacker with no privileges, causing denial of service (CVSS 5.3, medium). No exploitation or patch details are provided in the documents.

EUVD-2026-62717

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-16829 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...

CVE-2026-68901

In Wekan versions before 10.38, export endpoints in models/export.js and models/exportExcel.js called user._id.toString() without null-checking ReactiveCache.getUser(), throwing a TypeError on an invalid authToken and crashing the process via unhandled rejection. Fixed in 10.38 with a 401 guard a...