Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098926)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098926 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bridge: use a stable FDB dst snapshot in RCU readers Local FDB entries can be rewritten in...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104600 advisory. In the Linux kernel, the following vulnerability has been resolved: net/sched: schmultiq: Replace direct dequeue call with peek and qdiscdequeuepeeked multiqdequeue...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098742 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/net: fix improper handling of bogus negative read/write replies In p9clientwrite and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093154 advisory. The pngerr function in pngerror.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 makes a function call using a NULL...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093170)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093170 advisory. The pngdoexpandpalette function in libpng before 1.6.8 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via 1 a PL...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098972)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098972 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098699)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098699 advisory. In the Linux kernel, the following vulnerability has been resolved: net: Fix null-ptr-deref by socklockinitclassandname and rmmod. When I ran the repro 0 and waited...

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: RPK server signature algorithm selection can dereference a missing certificate

A flaw was found in OpenSSL. In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, where only the private key with no certificate is configured, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

openssl: NULL pointer dereference in QUIC server initial packet handling

A flaw was found in the OpenSSL QUIC Quick UDP Internet Connections server. A remote attacker could send a specially crafted QUIC initial packet with an invalid token. If the server's address validation is explicitly disabled, this could lead to a NULL pointer dereference, causing the server...

openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

A flaw was found in OpenSSL. An attacker controlling a Certificate Management Protocol CMP server, or acting as a man-in-the-middle, could craft a malicious CMP response. This response, containing a Certificate Request Message Format CRMF CertRepMessage with a specific malformed EncryptedValue...

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

CVE-2026-65367

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

EUVD-2026-65742

A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5. An app may be able to cause unexpected system termination...

CVE-2026-65367

A null pointer dereference vulnerability exists in iOS and iPadOS versions prior to 18.7.9 and 26.5 . The root cause is insufficient input validation , which could allow an application to trigger an unexpected system termination (crash). This issue is resolved in versions 18.7.9 and 26.5 through ...

CVE-2026-48429

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...

CVE-2026-48429

Substance3D - Designer (Adobe) is affected by a NULL Pointer Dereference (CWE-476) vulnerability that can crash the application, resulting in a denial-of-service . Exploitation requires user interaction : a victim must open a malicious file crafted by an attacker. The CVSS 3.1 base score is 5.5 (...

CVE-2026-48429 Substance3D - Designer | NULL Pointer Dereference (CWE-476)

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...