PT-2026-87856

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A null pointer dereference occurs in the Windows Routing and Remote Access Service RRAS, which allows an authorized attacker to cause a denial-of-servic...

PT-2026-87228

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A pointer dereference occurs when a program...

PT-2026-87696

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

PT-2026-87866

Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...

PT-2026-88042

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-87148

Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An issue in the 2dsphere index key generation allows an authenticated user with write access to cause a denial of service. Inserting a specially crafted GeoJSON document into a collection wit...

CVE-2026-82055: NULL Pointer Dereference

A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted GeoJSON document is inserted into a collection with a 2dsphere index, an inconsistency in geometry parsing can leave an internal object in a...

PT-2026-87208

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference occurs in Active Directory Domain Services, which allows an authorized attacker to cause a denial of service over a network. A null pointer...

Null Pointer Dereference in Log Report

A NULL Pointer Dereference vulnerability CWE-476 in FortiOS, FortiProxy and FortiPAM may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests...

PT-2026-87574

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

CVE-2026-67378: Untrusted Pointer Dereference

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

ALSA-2026:64791 Critical: 389-ds:1.4 security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...

CVE-2026-83498: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

ALSA-2026:64784 Critical: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...

PT-2026-87677

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

RHEL 9 : 389-ds-base (RHSA-2026:64783)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64783 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

NewStart CGSL MAIN 7.02 : libtiff Multiple Vulnerabilities (NS-SA-2026-0088)

The remote NewStart CGSL host, running version MAIN 7.02, has libtiff packages installed that are affected by multiple vulnerabilities: - A flaw has been found in LibTIFF 4.7.0. This affects the function TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 of the file tools/tiffcmp.c of th...

Oracle Linux 10 : ELSA-2026-64785-0: / 389-ds-base (ELSA-2026-647850)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647850 advisory. - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...