CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Multiple Local Privilege Escalation Vulnerabilities in Little Orbit GFAC Driver GFACSysx64.sys | ---|--- CVE IDs| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Vendor| Little Orbit Product| GamersFirst Anti-Cheat GFAC Driver GFACSysx64.sys Affected Versions| No version information is embedded in...

CVE-2026-45729

CVE-2026-45729 — ThorVG NULL Pointer Dereference via Malformed SVG Severity: CVSS 4.3 Medium — CWE-476 Advisory: GHSA-f863-8ghq-7h64 Fixed: ThorVG v1.0.5 Status: Patched / Disclosed Summary ThorVG's SVG parser dereferences a pointer that is never initialized when it encounters a truncated child...

cve-2021-3449

CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 17th March 2021 by Nokia. The fix was developed by Peter Kästle and Samuel Sapalski from Nokia. Mitigation The only known fix is to update libssl1.1. Even though some applications use hardened TLS configurations by default that disable T...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 kernel local privilege escalation vulnerability got burned in 10.11 full writeup etason shout out @ unthreadedjb 4 hax Install NULLGuard to protect yourself against tpwn and other NULL Pointer Deference bugs...

CVE-2009-2692

CVE-2009-2692 Linux Null pointer dereference This is just the compiled binary of the code available in https://www.exploit-db.com/exploits/9545/ Compiled for education purposes It was compiled under CentOS 4.8...

CVE-2026-98812

A flaw was found in the Linux kernel's Management Component Transport Protocol MCTP subsystem. This vulnerability allows a local user to cause a Denial of Service DoS by triggering a kernel crash. During device setup, the kernel exposes the network device object before its internal pointers are...

CVE-2022-34683

CVE-2022-34683 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where a null-pointer dereference occurs, which may lead to denial of service. authentication| complexity| vector ---|---|--- not available| not available|...

CVE-2026-98806

A flaw was found in the Linux kernel's octeontx2-pf network driver. When Data Center Bridging DCB is enabled, the driver assumes traffic queue mapping structures are always initialized, which is not the case for System Data Path SDP virtual functions. This issue leads to a NULL pointer dereferenc...

CVE-2026-98798

A flaw was found in the Linux kernel's Broadcom GENET network driver. A privileged local user could trigger a Denial of Service DoS by configuring receive coalescing settings on a network interface that has not yet been opened. This flaw leads to a null pointer dereference that can crash the kern...

CVE-2026-98796

A flaw was found in the Linux kernel's MediaTek Ethernet driver. This vulnerability allows a local user with network administration privileges to cause a Denial of Service DoS through a kernel crash. Due to an ordering issue during device initialization, the network interface is registered and...

CVE-2026-98791

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. A local user can exploit this vulnerability to cause a denial of service DoS through a system crash. During the teardown of an AFXDP eXpress Data Path transmit queue, outstanding descriptors requesting a transmit timestamp are...

CVE-2026-98795

A flaw was found in the Linux kernel's Microchip Sparx5 network driver. When operating on devices where Precision Time Protocol PTP initialization is skipped, the driver does not check if PTP was initialized before executing its deinitialization routines. A local privileged user could trigger thi...

CVE-2026-98854

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When applying an overlay fails during identifier allocation, the error cleanup routine incorrectly treats negative error codes as valid identifiers. A local user could trigger this vulnerability during resource allocation...

CVE-2026-98941

In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable large folios on encrypted inodes Commit 709f0f1f1bf5 "ext4: add checks for large folio incompatibilities when BS PS" disables large folios at mount time if the "encrypt" feature is set. However, enabling that...

CVE-2026-99087 dm-integrity: fix NULL pointer dereference when the 'R' flag is used

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

CVE-2026-99087

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

CVE-2026-99087

The Linux kernel contains a vulnerability in the dm-integrity component where a NULL pointer dereference occurs during dm_integrity_resume. This issue is triggered when a device has the SB_FLAG_DIRTY_BITMAP flag set and is activated in 'R' mode , causing the function to incorrectly attempt to rea...

EUVD-2026-108938

In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the 'R' flag is used If the dm-integrity device has the SBFLAGDIRTYBITMAP flag set and the user activates the device in the 'R' mode, a crash in dmintegrityresume happens because th...

CVE-2026-99074

The Linux kernel contains a vulnerability where a null-pointer dereference can occur during the PMTU (Path MTU) walk process. The root cause is a race condition: while RCU protects the lifetime of nexthop groups, it does not ensure that fib_info_num_path() and fib_info_nhc() observe the same grou...

CVE-2026-99073

The Linux kernel contains a vulnerability where an IPv4 Forwarding Information Base (FIB) dump could lead to a null pointer dereference. The issue occurs because fib_dump_info_fnhe() uses a loop bound that may become invalid if an RTM_NEWNEXTHOP operation replaces a nexthop group with fewer paths...