112915 matches found
CVE-2026-88114: Untrusted Pointer Dereference
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
ROS-20261013-73-0057
The vulnerability of the drivers/hid/hid-playstation.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0067
The vulnerability of the acpica/evregion.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-111531
FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm handle request ok when an ARM endpoint returns an empty HTTP 200 body. Attackers controlling the configured ARM gateway can return a zero-length body to pass NULL to strnlen and crash the connecting client...
ROS-20261013-73-0421
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-111534
FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update read cache bitmap v3 order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3 DO NOT CACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or...
PT-2026-111602
CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including CommServe, Webserver, Command Center, MediaAgents, Clients and HyperScale...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libde265 vulnerability (USN-8909-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8909-1 advisory. It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to...
Ubuntu 22.04 LTS : Linux kernel (GCP) vulnerabilities (USN-8877-1)
"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8877-1 advisory. It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null...
PT-2026-111494
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An invalid pointer in the DOM Notifications component leads to undefined behavior. Recommendations Update Firefox to version 158. Update Thunderbird to version 158...
CentOS Linux 8.5 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1791852988)
The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1791852988 advisory. - In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: idle: Check acpifetchacpidev return value The...
AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791915424)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791915424 advisory. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs...
ROS-20261013-73-0180
The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-95122
mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks in src/mp4file.cpp. This allows a remote attacker to cause a denial of service...
PT-2026-111588
Name of the Vulnerable Software and Affected Versions yt-dlp-web-ui versions prior to 4.0.1 Description A NULL pointer dereference occurs in the Service.Formats JSON-RPC method. This allows remote unauthenticated attackers to crash the server by sending a request with a url value such as --versio...
CVE-2026-107613
A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash the server, causing a denial of service. When re-initialization of the DXGI Desktop Duplication driver fails in applyNewScreenProperties for...
PT-2026-112002
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-112031
Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description An untrusted pointer dereference in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
PT-2026-113407
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interacti...