CVE-2026-95640: NULL Pointer Dereference

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

CVE-2026-85850: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85903: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-85859: NULL Pointer Dereference

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...

CVE-2026-85362: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-88126: Untrusted Pointer Dereference

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-88114: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88116: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-88112: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-83889: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

CVE-2026-83735: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-113139

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-112614

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

Microsoft Windows: CVE-2026-83848: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

PT-2026-113537

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description A null pointer dereference exists in the PKCS7 handling code used for IKE certificate authentication. The issue occurs when decoding an IKE CERT payload of type CERT PKCS7 WRAPPED X509. The...

SUSE SLES15 Security Update : expat (SUSE-SU-2026:4623-1)

"The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4623-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. -...

PT-2026-113536

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description A null pointer dereference exists in the IKEv2 state machine within the EAP handling code for authentication. Due to an inconsistency in the state machine code, a fall-through occurs where...

PT-2026-122246

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

PT-2026-122247

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT PKCS7 WRAPPED X509, it guards the PKCS7 blob with SEC PKCS7ContainsCertsOrCrls and then iterates the certificate list with SEC...