CVE-2026-108471: Incomplete List of Disallowed Inputs

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0195

The vulnerability of the fwclassify function in the net/sched/clsfw.c file of the network scheduling subsystem in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-103855: NULL Pointer Dereference

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

CVE-2026-108133: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0502

The vulnerability of the usblpprobe function in the drivers/usb/class/usblp.c file of the Linux device driver for USB devices is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

ROS-20261013-73-0219

The vulnerability of the sun4ibackendatomiccheck function in the drivers/gpu/drm/sun4i/sun4ibackend.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...

ROS-20261013-73-0294

The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-109939: NULL Pointer Dereference

FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in updatereadcachebitmapv3order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3DONOTCACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or compromised R...

CVE-2026-70300: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-104343: NULL Pointer Dereference

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...

PT-2026-112383

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Office 2024 Description An untrusted pointer dereference allows an unauthorized attacker to execute code over a network. A pointer dereference occurs when a program attempts to read or writ...

CVE-2026-102700: Undefined Security Weakness

With its original introduction, GNTTABcacheflush was made available uniformly. XSA-232 CVE-2017-14318 then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is...

ROS-20261013-73-0132

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-111645

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An issue exists in the GNTTAB cache flush function where a previously added NULL pointer check failed to correctly adjust the subsequent error path. This results...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libde265 vulnerability (USN-8909-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8909-1 advisory. It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to...

CVE-2026-77206: NULL Pointer Dereference

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a...

CVE-2026-77207: NULL Pointer Dereference

Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERTPKCS7WRAPPEDX509, it guards the PKCS7 blob with SECPKCS7ContainsCertsOrCrls and then iterates the certificate list with...

ROS-20261013-73-0063

The vulnerability of the greybus/light.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0053

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-111494

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An invalid pointer in the DOM Notifications component leads to undefined behavior. Recommendations Update Firefox to version 158. Update Thunderbird to version 158...