CVE-2026-85362

A Release of invalid pointer or reference vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploit details or version-specific information are provided in the documents, and no exploits are c...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-70248

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. No specific versions or exploit links are provided in the documents, but the vulnerability has an official fix available.

CVE-2026-70275

A vulnerability exists in the Windows CD-ROM File System Driver due to an untrusted pointer dereference . This flaw could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a CVSS 3.1 base score of 8.8 (High) . No specific exploitations or in-the...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

CVE-2026-83826

A vulnerability exists in Windows Error Reporting due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impacts on confidentiality, integrity, and availability. While the ...

CVE-2026-83648

A null pointer dereference vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to trigger a denial of service (DoS) over the network. The vulnerability is categorized under CWE-476 . No specific exploit code or information regarding in-the-wild explo...

CVE-2026-83571

A null pointer dereference vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity requiring low privileges. Exploitation detai...

CVE-2026-70104

A vulnerability in the Windows Win32 Kernel Subsystem involves an untrusted pointer dereference . This flaw enables an authorized attacker to achieve local privilege escalation . The official remediation is an official fix provided by Microsoft.

CVE-2026-69978

A null pointer dereference vulnerability exists in Windows VMSwitch . This flaw allows an authorized attacker to cause a local denial of service (DoS). The vulnerability is associated with CWE-476 . While the documents confirm the existence of the flaw and its impact on availability, no specific ...

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-69850

A vulnerability exists in Windows Certificates due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The provided documents do not specify the exact component, file, or specific software version affected, nor do they provide de...

CVE-2026-70566

A null pointer dereference vulnerability exists in Windows Schannel , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-476 . While the specific component or file is not detailed in the provided documents, the impact is rate...

CVE-2026-105723

The Windows Distributed File System (DFS) is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an unauthorized attacker to achieve elevation of privilege over a network. The vulnerability has a HIGH base severity score of 7.5 (CVSS 3.1). While the specific root cause...

CVE-2026-104343

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability (CWE-476) that can result in an application denial-of-service . An attacker can exploit this issue to crash the application, but it requires user interaction where a victim must open a malicious file . No specific exploit de...

CVE-2026-102700

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-102700

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

CVE-2026-77095

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...

CVE-2026-90250

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup storage mechanism. When replacing an existing BPF program with a new one that uses BPFMAPTYPEPERCPUCGROUPSTORAGE, the system may fail to properly allocate and assign the necessary cgroup storage. This oversight can lead to a...

CVE-2026-90228

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker can trigger a NULL pointer dereference by issuing a specific Identify command CNS 05h, CSI 02h ZNS targeting a file-backed namespace. This vulnerability occurs because the system attempts to access a block device that does...