CVE-2026-109939: NULL Pointer Dereference

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in updatereadcachebitmapv3order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3DONOTCACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or compromised R...

CVE-2026-109679: NULL Pointer Dereference

FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in armhandlerequestok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...

CVE-2026-109107: NULL Pointer Dereference

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made availab...

CVE-2026-77207: NULL Pointer Dereference

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

CVE-2026-77206: NULL Pointer Dereference

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

CVE-2026-95640: NULL Pointer Dereference

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

CVE-2026-96953: NULL Pointer Dereference

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

CVE-2026-88079: NULL Pointer Dereference

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-88076: NULL Pointer Dereference

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83665: NULL Pointer Dereference

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-83636: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-85859: NULL Pointer Dereference

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...

CVE-2026-84017: NULL Pointer Dereference

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

CVE-2026-70248: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83571: NULL Pointer Dereference

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-69978: NULL Pointer Dereference

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...

CVE-2026-69795: NULL Pointer Dereference

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70566: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-95122: NULL Pointer Dereference

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...