CVE-2026-88076

A null pointer dereference vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with the impact affecting confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-83665

A null pointer dereference vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to cause a denial of service over the network. The vulnerability is associated with CWE-476 . No specific versions, root cause files, or exploit links are provided in the docume...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

CVE-2026-85859

A Null pointer dereference vulnerability exists in the Windows Message Queuing Queue Manager . This flaw allows an authorized attacker to perform a denial of service (DoS) attack over a network. The vulnerability is categorized under CWE-476 and has a CVSS 3.1 score of 6.5. No specific exploit in...

CVE-2026-84017

A Null pointer dereference vulnerability exists in the Windows Routing and Remote Access Service (RRAS) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over the network. The vulnerability is characterized by a CVSS 3.1 base score of 7.5 with High availabili...

CVE-2026-70248

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. No specific versions or exploit links are provided in the documents, but the vulnerability has an official fix available.

CVE-2026-83648

A null pointer dereference vulnerability exists in Active Directory Domain Services . This flaw allows an authorized attacker to trigger a denial of service (DoS) over the network. The vulnerability is categorized under CWE-476 . No specific exploit code or information regarding in-the-wild explo...

CVE-2026-83571

A null pointer dereference vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity requiring low privileges. Exploitation detai...

CVE-2026-69978

A null pointer dereference vulnerability exists in Windows VMSwitch . This flaw allows an authorized attacker to cause a local denial of service (DoS). The vulnerability is associated with CWE-476 . While the documents confirm the existence of the flaw and its impact on availability, no specific ...

CVE-2026-69795

A null pointer dereference vulnerability exists in the Windows Clipboard Server . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploitation details or direct links are provided in the documentation, but the vulnerability is addressed via an official ...

CVE-2026-70566

A null pointer dereference vulnerability exists in Windows Schannel , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is categorized under CWE-476 . While the specific component or file is not detailed in the provided documents, the impact is rate...

CVE-2026-104343

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability (CWE-476) that can result in an application denial-of-service . An attacker can exploit this issue to crash the application, but it requires user interaction where a victim must open a malicious file . No specific exploit de...

SUSE CVE-2026-109272

ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers can supply a crafted PostScript file for processing to crash the application, causing a denial of service...

CVE-2026-95122

mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...

CVE-2026-77095

CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...

CVE-2026-90250

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter cgroup storage mechanism. When replacing an existing BPF program with a new one that uses BPFMAPTYPEPERCPUCGROUPSTORAGE, the system may fail to properly allocate and assign the necessary cgroup storage. This oversight can lead to a...

CVE-2026-90228

A flaw was found in the Linux kernel's nvmet subsystem. A remote attacker can trigger a NULL pointer dereference by issuing a specific Identify command CNS 05h, CSI 02h ZNS targeting a file-backed namespace. This vulnerability occurs because the system attempts to access a block device that does...

CVE-2026-90280

A flaw was found in the Linux kernel's qcom qmp-usb physical layer PHY driver. A local attacker could trigger a null pointer dereference by re-enabling runtime power management via a sysfs attribute before the PHY is fully initialized. This can lead to a system crash, resulting in a Denial of...

CVE-2026-90335

A flaw was found in the Linux kernel's handling of TTY devices. When a TTY device registration fails before a character device cdev is allocated, the serial core retains the port. Subsequent removal of this port can lead to a null-pointer dereference if cdevdel is called with a NULL cdev slot. Th...

CVE-2026-90294

A flaw was found in the Linux kernel. The iSER iSCSI Extensions for RDMA protocol implementation incorrectly sends a login response before the session is fully registered. A remote attacker could exploit this by sending a SCSI command immediately after receiving the premature login response. This...