109125 matches found
ROS-20261008-73-0140
The vulnerability of the fbnewmodelist function in the drivers/video/fbdev/core/fbmem.c driver for kernel-based frame buffer devices in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261008-73-0105
The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...
ROS-20261008-73-0125
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0123
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0134
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0162
The vulnerability of the bdevcacheinit function in the block/bdev.c module, which supports the block-level kernel in Linux operating systems, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
RHEL 8 : redhat-ds:11 (RHSA-2026:79217)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:79217 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...
CVE-2026-107708: NULL Pointer Dereference
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...
EulerOS 2.0 SP15 : patch (EulerOS-SA-2026-3998)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
Microsoft Office Pointer Manipulation Code Execution
The vulnerability of the application for managing Windows Security formerly Windows Security Center security and privacy settings on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows biometric service Privilege Escalation
The vulnerability of the biometric service in Windows operating systems is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to gain increased privileges...
EulerOS 2.0 SP15 : haproxy (EulerOS-SA-2026-3980)
According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...
Linux Distros Unpatched Vulnerability : CVE-2026-98268
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf: Fix null pointer access in isincludeguestevent A typical module unload occurring event when there is an active perf connection leads to freeing of the pmu...
EulerOS 2.0 SP15 : haproxy (EulerOS-SA-2026-3914)
According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...
SUSE SLES16: libIex-3_2-31 / libIex-3_2-31-x86-64-v3 / libIlmThread-3_2-31 / etc (SUSE-SU-2026:24012-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24012-1 advisory. This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a...
Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : poppler vulnerabilities (USN-8894-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8894-1 advisory. It was discovered that Poppler had an integer overflow in FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to...
Microsoft Office Pointer Manipulation Code Execution
The vulnerability of the Microsoft Office suite is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
EulerOS 2.0 SP15 : patch (EulerOS-SA-2026-3932)
According to the versions of the patch packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive...
CVE-2026-107213
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing without checking whether the independently optional drawing element exists. File.GetSlicers reads ws.Drawing.RID after seeing a...
CVE-2026-107213
The Excelize Go library (versions 2.9.0 to 2.11.0 ) contains a nil-pointer dereference vulnerability in the GetSlicers function. The issue occurs because the library checks for an extLst element but fails to verify the existence of the independently optional ws.Drawing element before dereferencin...