34291 matches found
CVE-2026-40413
Windows TCP/IP Denial of Service Vulnerability...
CVE-2026-40401
Windows TCP/IP Denial of Service Vulnerability...
CVE-2026-40369
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2026-40367
Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2026-40405
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
CVE-2026-20914
The CVE-2026-20914 entry concerns Intel QAT software drivers for Windows prior to version 2.6.0. The vulnerability is a Null Pointer Dereference in Ring 3 (User Applications) that could allow a Denial of Service. Exploitation requires a local authenticated user with low complexity and no user int...
CVE-2026-20771
Null pointer dereference for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
CVE-2026-20771
Null pointer dereference for some IntelR QAT software drivers for Windows before version 1.13 within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result...
CVE-2026-20738
Intel QuickAssist Adapter 8960 software prior to version 1.13 contains an untrusted pointer dereference in Ring 3 (User Applications) that may allow local privilege escalation by an authenticated, low-priv user with no user interaction. Impact is high on confidentiality, integrity, and availabili...
CVE-2026-20738
Untrusted pointer dereference for some IntelR QuickAssist Adapter 8960 software before version 1.13 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of...
Microsoft Word Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office Word allows an unauthorized attacker to execute code locally...
Windows TCP/IP Denial of Service Vulnerability
...
Windows TCP/IP Denial of Service Vulnerability
...
Windows TCP/IP Denial of Service Vulnerability
Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
BIT-PHP-2026-7262 NULL pointer dereference in SOAP apache:Map decoder with missing <value>
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer,...
BIT-PHP-2026-7259 Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to a NULL pointer dereference, resulting in a segmentation fault and denial of service. The vulnerability is exploitable when...
BIT-MONGODB-2026-8063 Post-auth null pointer dereference when aggregating against a view with empty search pipeline
An authenticated user can crash mongod when running $rankFusion or $scoreFusion with an empty pipeline on a view. When resolving a view, the server inspects the aggregation pipeline to determine whether it begins with an Atlas Search stage. For $rankFusion and $scoreFusion, this inspection reads...
BIT-LIBPHP-2026-7262 NULL pointer dereference in SOAP apache:Map decoder with missing <value>
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, when a SOAP server has a typemap configured, the decoding process contains a mistake which checks the wrong variable in case of missing value element. This leads to dereferences a NULL pointer,...
CVE-2025-40833
CVE-2025-40833 describes a null pointer dereference vulnerability in devices when handling specially crafted IPv4 requests, leading to a denial of service. The impact is a DoS condition requiring a manual restart to recover. The available documents do not specify the affected products, vendor, ve...
CVE-2025-40833
The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual restart is required to recover the system...