EUVD-2026-94977

A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties for...

EUVD-2026-94964

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-16165

IBM DataPower Gateway is vulnerable to a NULL pointer dereference (CWE-476), which could allow a remote attacker to cause a denial of service . The affected versions include 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 through 11.0.0.2 . IBM recom...

CVE-2026-16165 IBM DataPower Gateway NULL Pointer Dereference

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to a null pointer dereference...

CVE-2026-16182

IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing...

EUVD-2026-94956

IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing...

CVE-2026-16182

The IBM DataPower Gateway is vulnerable to a denial of service (DoS) due to a NULL pointer dereference occurring during GraphQL variable processing . This issue affects the following versions: 10.5.0.0 through 10.5.0.22 , 10.6.1 through 10.6.6 , 10.6.0.0 through 10.6.0.10 , and 11.0.0.0 through 1...

CVE-2026-16182 IBM DataPower Gateway NULL Pointer Dereference

IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an attacker to cause a denial of service due to a NULL pointer dereference in GraphQL variable processing...

CVE-2026-98174

A flaw was found in the Linux kernel's SMB client subsystem. Missing list initialization and a race condition during connection reconnect operations can lead to a null-pointer dereference or list corruption. This flaw allows reconnection events, such as during network instability or server...

[SECURITY] [DLA 4828-1] gst-plugins-base1.0 security update

Debian LTS Advisory DLA-4828-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson October 08, 2026 https://wiki.debian.org/LTS Package : gst-plugins-base1.0 Version : 1.22.0-3+deb12u7 CVE ID : CVE-2026-18297 CVE-2026-85150 Multiple vulnerabilities has been...

kernel: ipv6: add NULL checks for idev in SRv6 paths

A flaw was found in the Linux kernel. Missing null pointer checks in the IPv6 Segment Routing SRv6 implementation, specifically within the seg6hmacvalidateskb and ipv6srhrcv functions, can occur when an IPv6 device lacks proper configuration. This oversight may allow an attacker to trigger a null...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

kernel: fs/notify: call exportfs_encode_fid with s_umount

A flaw was found in the Linux kernel’s filesystem notification fs/notify code where calling inotifyshowfdinfo on a file descriptor watching an overlayfs inode during an unmount operation could lead to a NULL pointer dereference...

CVE-2026-107708: NULL Pointer Dereference

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : poppler vulnerabilities (USN-8894-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8894-1 advisory. It was discovered that Poppler had an integer overflow in FoFiTrueType::cvtSfnts. An attacker could possibly use this issue to...

SUSE SLES16: libIex-3_2-31 / libIex-3_2-31-x86-64-v3 / libIlmThread-3_2-31 / etc (SUSE-SU-2026:24012-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:24012-1 advisory. This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a...

RHEL 8 : redhat-ds:11 (RHSA-2026:79217)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:79217 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

EulerOS 2.0 SP15 : haproxy (EulerOS-SA-2026-3914)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

CVE-2026-107733: NULL Pointer Dereference

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand handles CmdExec by passing a null current-tab pointer to RunWithExe, which dereferences WindowTab::filePath. A local process in the same interactive Windows session, at an integrity level greater than or equal t...

PT-2026-108201

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 krb5 versions prior to 1.22.3 Description A NULL pointer dereference occurs in the make cred list function within rd cred.c. Authenticated Kerberos clients can trigger this by sending mismatched KRB-CRED arrays. Specifically, an...