PT-2026-112383

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Office 2024 Description An untrusted pointer dereference allows an unauthorized attacker to execute code over a network. A pointer dereference occurs when a program attempts to read or writ...

UBUNTU-CVE-2026-107613

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties for...

CVE-2026-109967: NULL Pointer Dereference

yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attackers to crash the server. Attackers can send a single request with a url value like --version, causing invalid yt-dlp JSON output and an...

CVE-2026-109939: NULL Pointer Dereference

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in updatereadcachebitmapv3order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3DONOTCACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or compromised R...

PT-2026-111534

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update read cache bitmap v3 order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3 DO NOT CACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or...

PT-2026-111494

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An invalid pointer in the DOM Notifications component leads to undefined behavior. Recommendations Update Firefox to version 158. Update Thunderbird to version 158...

ROS-20261013-73-0305

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0210

The vulnerability of the hciuartregisterdev function in the drivers/bluetooth/hcildisc.c device driver of the Linux operating system’s Bluetooth driver is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise...

Microsoft Windows: CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

PT-2026-113536

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description A null pointer dereference exists in the IKEv2 state machine within the EAP handling code for authentication. Due to an inconsistency in the state machine code, a fall-through occurs where...

PT-2026-113537

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description A null pointer dereference exists in the PKCS7 handling code used for IKE certificate authentication. The issue occurs when decoding an IKE CERT payload of type CERT PKCS7 WRAPPED X509. The...

PT-2026-122246

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

PT-2026-122247

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT PKCS7 WRAPPED X509, it guards the PKCS7 blob with SEC PKCS7ContainsCertsOrCrls and then iterates the certificate list with SEC...

CVE-2026-77206: NULL Pointer Dereference

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

CVE-2026-77207: NULL Pointer Dereference

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

SMB Server Network Transport Driver DoS

The vulnerability of the SMB Server Network Transport Driver srvnet.sys on Windows operating systems is related to pointer swapping errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libde265 vulnerability (USN-8909-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8909-1 advisory. It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791915424)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791915424 advisory. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs...

PT-2026-111645

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists in the GNTTAB cache flush function where a previously added NULL pointer check failed to correctly adjust the subsequent error path. This results...

ROS-20261013-73-0500

The vulnerability of the clk-rcg2.c component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...