Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

50803 matches found

Positive Technologies
Positive Technologies•added 2026/10/15 12:00 a.m.•12 views

PT-2026-115134

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById to return...

6.8CVSS5.6AI score0.00198EPSS
SaveExploits0References6
osv_ubuntu
osv_ubuntu•added 2026/10/15 12:00 a.m.•4 views

UBUNTU-CVE-2026-107708

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

6.9CVSS5.7AI score0.00521EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus•added 2026/10/15 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2026-110834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycl...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve•added 2026/10/15 12:00 a.m.•6 views

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.4AI score0.00254EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve•added 2026/10/15 12:00 a.m.•7 views

CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service...

7.1CVSS6.4AI score0.00254EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies•added 2026/10/15 12:00 a.m.•12 views

PT-2026-115135

Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation trac...

6.8CVSS5.6AI score0.0013EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve•added 2026/10/15 12:00 a.m.•15 views

CVE-2026-107778

MIT Kerberos 5 krb5 through 1.22.2 contains a NULL pointer dereference in makecredlist in rdcred.c that allows authenticated Kerberos clients to crash services by sending mismatched KRB-CRED arrays. Attackers can send forwarded credentials with more tickets than ticketinfo entries through...

7.1CVSS5.6AI score0.00424EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve•added 2026/10/15 12:00 a.m.•7 views

CVE-2026-107708

MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...

6.9CVSS5.7AI score0.00521EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus•added 2026/10/15 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-110829

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST...

7.1CVSS6.2AI score0.00254EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu•added 2026/10/15 12:00 a.m.•8 views

UBUNTU-CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1References4
osv_debian
osv_debian•added 2026/10/14 11:17 p.m.•12 views

DEBIAN-CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1References1
NVD
NVD•added 2026/10/14 11:17 p.m.•13 views

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS0.00254EPSS
SaveExploits1References2
osv_debian
osv_debian•added 2026/10/14 11:17 p.m.•13 views

DEBIAN-CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service...

7.1CVSS6.2AI score0.00254EPSS
SaveExploits1References1
NVD
NVD•added 2026/10/14 11:17 p.m.•9 views

CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service...

7.1CVSS0.00254EPSS
SaveExploits1References2
CVE
CVE•added 2026/10/14 10:52 p.m.•25 views

CVE-2026-110834

FreeRDP versions 2.0.0 before 3.32.0 are vulnerable to a null pointer dereference when using Linux serial redirection . A malicious RDP server can trigger a Denial of Service by sending out-of-lifecycle serial IRPs (specifically IRP_MJ_READ or IRP_MJ_WRITE ) before a handle is created or after it...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE•added 2026/10/14 10:52 p.m.•10 views

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1
Vulnrichment
Vulnrichment•added 2026/10/14 10:52 p.m.•5 views

CVE-2026-110834 FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1References2
Mend
Mend•added 2026/10/14 10:52 p.m.•8 views

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS6.3AI score0.00254EPSS
SaveExploits1References2
Cvelist
Cvelist•added 2026/10/14 10:52 p.m.•32 views

CVE-2026-110834 FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS0.00254EPSS
SaveExploits1References2
osv_cve
osv_cve•added 2026/10/14 10:52 p.m.•15 views

CVE-2026-110834 FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

7.1CVSS5.7AI score
SaveExploits0References4
Rows per page
Query Builder