CVE-2026-101175

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a null pointer dereference in the gdisurfacebits function by sending a specially crafted Surface Bits command that claims to use the NSCodec codec ID. This vulnerability exists even when the NSCodec is disable...

CVE-2026-105924

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

CVE-2026-117548

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN rename operation uses an attribute's schema alias name such as "commonName" instead of its canonical name such as "cn" as the new relative distinguished name. An authenticated attacker with the ModifyDN...

CVE-2026-115403: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6…

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table entry it adds without checking that the add succeeded. When the destination table is full and an off-link destination is reached through a...

PT-2026-135342

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-120454: The Sleuth Kit: The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs_decompress_lzvn_attr() that…

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfsdecompresslzvnattr that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressedsize in an LZVN inline com.apple.decmpfs attribute so allocation fails and t...

PT-2026-135824

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, built with BSD raw socket and IPv6 support, the IPv6 raw send path uses the destination-table entry it adds without checking that the add succeeded. When the destination table is full and an off-link destination is reached through a...

PT-2026-135509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An unprivileged caller can trigger a NULL pointer dereference, leading to a kernel panic, by using KEYCTL RESTRICT KEYRING followed by add key. This occurs because the PKCS8 parser leave...

PT-2026-135470

The Sleuth Kit through 4.15.0 contains a NULL pointer dereference vulnerability in decmpfs decompress lzvn attr that allows attackers to crash the tool by supplying a crafted HFS+ image. Attackers can set a huge uncompressed size in an LZVN inline com.apple.decmpfs attribute so allocation fails a...

PT-2026-135487

In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on the network can fill the destination table with Packet Too B...

CVE-2026-101175: Huawei HarmonyOS: Null pointer dereference vulnerability in the ArkWeb module

Null pointer dereference vulnerability in the ArkWeb module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-99220: Linux: In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs The…

In the Linux kernel, the following vulnerability has been resolved: asymmetrickeys: reject trust keys without IDs The PKCS8 parser deliberately leaves the asymkeyids payload slot empty. keyorkeyringcommon unconditionally dereferences that slot when a PKCS8 key is supplied to a keyorkeyring...

CVE-2026-114408: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6…

In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6 Packet Too Big handler uses the destination-table entry it adds without checking that the add succeeded. A sender on the network can fill the destination table with Packet Too B...

Security Bulletin: Vulnerabilities in httpd library affect Power HMC.

Summary The httpd is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. The applicable CVEs are as follows: CVE-2026-28780, CVE-2026-33007, CVE-2026-33857, CVE-2026-34032, CVE-2026-34059 Vulnerability Details CVEID:CVE-2026-28780 DESCRIPTION: Heap-based Buffer...

CVE-2026-99160

A flaw was found in the Linux kernel's ring buffer subsystem. A local user can exploit this vulnerability to cause a Denial of Service DoS by crashing the kernel. The issue occurs when reading ring buffer metadata files for a central processing unit CPU that has never come online, resulting in a...

CVE-2026-99159

A flaw was found in the Linux kernel's ring-buffer subsystem. A local user can cause a Denial of Service DoS by crashing the system when interacting with persistent ring buffers. Due to an incorrect sub-buffer index calculation, the kernel leaves an entry uninitialized, resulting in a null pointe...

CVE-2026-99153

A flaw was found in the Linux kernel's SCSI subsystem within the libiscsi module. A malicious or compromised iSCSI storage target can trigger a denial of service DoS or data integrity issues by sending a crafted Reject Protocol Data Unit PDU containing an unvalidated Initiator Task Tag ITT. Becau...