CVE-2026-119760 sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then clo...

EUVD-2026-114237

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then clo...

CVE-2026-119760

The sniproxy daemon, version 0.7.0 and prior, contains a NULL pointer dereference vulnerability within the resolv_cancel() function. This flaw allows remote unauthenticated attackers to crash the service by providing overlong hostnames , specifically 254 or 255 character TLS SNI names or HTTP Hos...

CVE-2026-119760 sniproxy through 0.7.0 NULL Pointer Dereference via resolv_cancel()

sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolvcancel that allows remote unauthenticated attackers to crash the daemon by sending overlong hostnames. Attackers can send a 254 or 255 character TLS SNI name or HTTP Host header matching a wildcard backend, then clo...

CVE-2026-105924

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

DEBIAN-CVE-2026-105924

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

CVE-2026-105924

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

EUVD-2026-113895

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

CVE-2026-105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

CVE-2026-105924 NULL pointer dereference vulnerability in QCborValue to JSON conversion impacts Qt

A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module...

CVE-2026-105924

The Qt Core module is affected by a NULL pointer dereference vulnerability occurring during the conversion of QCborValue to JSON . This vulnerability impacts the availability of the software, as indicated by the CVSS 4.0 metrics. No specific remediation or exploit details are provided in the docu...

CVE-2026-98928

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. A local privileged user can cause a Denial of Service DoS by initializing a virtual machine with inconsistent Scalable Vector Extension SVE settings. This condition leads to a null pointer dereference whe...

CVE-2026-98922

A flaw was found in the Linux kernel's IBM EMAC Ethernet Media Access Controller network driver. During device initialization, the driver attempts to attach the physical network interface before network device operations are configured, causing a null pointer dereference. A local user capable of...

CVE-2026-98941

A flaw was found in the Linux kernel's ext4 filesystem. A local user can cause a denial of service DoS and system crash by writing encrypted data to an ext4 filesystem when encryption is enabled after mounting. This occurs because the filesystem bypasses compatibility checks for large memory bloc...

CVE-2026-98926

A flaw was found in the Linux kernel's AMD display driver. During Display Power Management Signaling DPMS sequences, the driver attempts to access a display sink pointer without verifying whether it is null. A local user could exploit this flaw during display power state transitions, triggering a...

kernel: net: bridge: use a stable FDB dst snapshot in RCU readers

A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities KEV, citing evidence of active exploitation. The vulnerabilities are listed below - CVE-2026-97229 CVSS score: 10.0 - An...

K000164064: Apache HTTP Server vulnerability CVE-2026-46729

Security Advisory Description NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. CVE-2026-46729 Impact There is no impact; F5 products are not affected by this vulnerability. Securi...

EUVD-2026-113487

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On...

CVE-2026-18629 GPU DDK - libusc.so NPD due to integer overflow at ConvertSwitchToArrayLookup during WebGPU shader compilation

A web page that contains unusual GPU shader code is loaded into the GPU compiler process and can lead memory allocation failure. If the allocation failure is not properly handled, the compiler may dereference a NULL pointer at a controlled offset, resulting in a crash of the compiler process. On...