PT-2026-87777

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87856

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A null pointer dereference occurs in the Windows Routing and Remote Access Service RRAS, which allows an authorized attacker to cause a denial-of-servic...

PT-2026-87871

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

PT-2026-87677

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

PT-2026-87590

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

CVE-2026-78451: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69881: NULL Pointer Dereference

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

PT-2026-114484

Уязвимость драйвера SMB Server Network Transport Driver srvnet.sys операционных систем Windows связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

PT-2026-109381

Уязвимость пакета программ Microsoft Office связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

CVE-2026-82055: NULL Pointer Dereference

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64791)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64791 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64776)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64776 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

PT-2026-87523

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description An untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a program...

Linux GPU Driver NULL Pointer Dereference

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-43603| A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.| 6.9...

CLSA-2026-1788815738 Fix CVE(s): CVE-2026-53786, CVE-2026-53789, CVE-2026-70459, CVE-2026-70463

SECURITY UPDATE: authorization bypass in "auth users" @Group Name parsing - debian/patches/CVE-2026-70463.patch: tokenise the "auth users" value with confstrtok in authenticate.c, imported into util.c and declared in proto.h, so a leading comma splits on commas alone and an @Group Name entry...

CLSA-2026-1788816257 Fix CVE(s): CVE-2026-53786, CVE-2026-53789, CVE-2026-70459, CVE-2026-70463

SECURITY UPDATE: "auth users" authorization bypass on entries containing a space - debian/patches/CVE-2026-70463.patch: parse the "auth users" value with confstrtok in authserver, so the documented leading-comma form splits on commas alone and an "@Group Name:deny" entry is no longer torn in two ...

SUSE CVE-2026-19534

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undic...