CVE-2026-95122

The mp4v2 library version 2.0.0 is vulnerable to a NULL pointer dereference within the MP4File::GenerateTracks() function located in src/mp4file.cpp . This security flaw allows a remote attacker to cause a denial of service (DoS). While the documents confirm the vulnerability and provide its CVSS...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-111537

Name of the Vulnerable Software and Affected Versions FreeRDP versions 2.3.0 through 3.31.0 Description An issue exists where the software dereferences a NULL stream in the rdg process close packet function within libfreerdp/core/gateway/rdg.c. This occurs because the rdg process control packet...

CVE-2026-103852: NULL Pointer Dereference

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction...

CVE-2026-105896: NULL Pointer Dereference

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

PT-2026-113417

🚨 CVE-2026-105896 Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires...

Microsoft Windows: CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

CVE-2026-102700: Undefined Security Weakness

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

PT-2026-112820

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A null pointer dereference in the Windows Message Queuing Queue Manager allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-111588

Name of the Vulnerable Software and Affected Versions yt-dlp-web-ui versions prior to 4.0.1 Description A NULL pointer dereference occurs in the Service.Formats JSON-RPC method. This allows remote unauthenticated attackers to crash the server by sending a request with a url value such as --versio...

Microsoft Windows: CVE-2026-69978: Microsoft Windows VMSwitch Denial of Service Vulnerability

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-70566: Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-84017: Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83781: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88076: Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88079: Windows MIDI Service Module Elevation of Privileges Vulnerability

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-77207: NULL Pointer Dereference

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

CVE-2026-103826: NULL Pointer Dereference

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

PT-2026-113537

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT PKCS7 WRAPPED X509, it guards the PKCS7 blob with SEC PKCS7ContainsCertsOrCrls and then iterates the certificate list with SEC...

PT-2026-112336

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A null pointer dereference in Windows Hyper-V allows an authorized attacker to cause a local denial of service. A null pointer dereference occurs when a program attempts to read from ...