PT-2026-70467

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A null pointer dereference in the Windows Graphics Kernel allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a...

PT-2026-70411

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

CVE-2026-65681: NULL Pointer Dereference

Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network...

CVE-2026-20787: NULL Pointer Dereference

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

Linux Distros Unpatched Vulnerability : CVE-2026-68239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in ttmpoolbackup Pages in ttmpoolbackup can be NU...

Linux Distros Unpatched Vulnerability : CVE-2026-68139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500162)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500162 advisory. - KVM: x86: Check for invalid/obsolete root after making MMU pages available Sean Christopherson Orabug: 39832946 CVE-2026-64561 - x86/bugs: Make...

PT-2026-70234

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description Any authenticated user, including those with the reader role, can cause the entire server process to terminate by sending a single request. This occurs when calling the SetPassword...

Linux Distros Unpatched Vulnerability : CVE-2026-68307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925vifconnectit...

PT-2026-70417

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-80720

This update for libarchive fixes the following issues: - creating temporary files in the current working directory instead of the target directory can lead to file creation failures when the working directory is not writable bsc1254340. - file descriptor leak in the mtree parser cleanup path coul...

PT-2026-70418

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-19411

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-68317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pdscore: fix auxiliary device add/del races Two paths add or delete the same slot...

Linux Distros Unpatched Vulnerability : CVE-2026-68385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy...

PT-2026-70283

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description A null pointer dereference within Ring 0 the most privileged level of the CPU of the kernel may lead to a denial of service. An unprivileged,...

CVE-2026-20878: NULL Pointer Dereference

Null pointer dereference for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

PT-2026-70310

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description A null pointer dereference within Ring 2 device drivers can lead to a denial of service. This occurs when a network adversary, acting as an...

CVE-2026-62702: NULL Pointer Dereference

Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network...

CVE-2026-18638: NULL Pointer Dereference

Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist...