RockyLinux 10 : kernel (RLSA-2026:64775)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64775 advisory. kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: ipv6: add NULL checks for idev in SRv6 paths CVE-2026-23442 kernel: udp:...

RockyLinux 8 : 389-ds:1.4 (RLSA-2026:64791)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64791 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

CVE-2026-86141

A NULL pointer dereference in libxml2's xmlRegNewParserCtxt function allows a local attacker to cause a denial of service DoS. The flaw occurs when strlen is called on an unverified pointer following a failed xmlStrdup memory allocation, resulting in a process crash...

CVE-2026-73502

A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a null-pointer dereference in the openapi3filter.ValidateRequest function. This occurs when validating a request against a content parameter whose application/json media type has no schema. Successful exploitation lea...

CVE-2026-66303

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

EUVD-2026-73940

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-66303

CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...

CVE-2026-77901

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77489

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72949

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

CVE-2026-72939

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

CVE-2026-70575

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

CVE-2026-69881

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69744

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69587

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69384

Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...

CVE-2026-62762

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-84392

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...

EUVD-2026-73790

Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-77901

A null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The vulnerability requires user interaction (e.g., opening a crafted document) but no prior authentication. CISA rates the technical impact as total while noting exploitation is cur...