MGASA-2026-0250 Updated haproxy packages fix security vulnerability

HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buffer misparse as new FCGI record headers. When contentLength is 65535 and paddingLength is 1 or more, the drl field wraps to 0, causing incorrect record...

EUVD-2026-43573

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference. X509V3EXTd2iext returns NULL when an extension's DER value fails to parse. basicC, ia5string, and authatt dereference its result without a NULL check. keyiddata also dereferences akid-keyid,...

CVE-2026-55136: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-58268

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference in Active Directory Domain Services allows an authorized attacker to cause a denial of service over a network. A null pointer dereference...

CVE-2026-56168: NULL Pointer Dereference

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-55138: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2025-56363

A null pointer dereference vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters Channel, Account Login, TargetNavigator, etc.. The function lacks proper validation of the delegate pointer before dereferencing. ...

CVE-2026-50673: NULL Pointer Dereference

Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-58454

Name of the Vulnerable Software and Affected Versions Windows USB Hub Driver affected versions not specified Description An untrusted pointer dereference in the Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a program accesses...

PT-2026-58363

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description An untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally. This issue can be used to elevate low-privileged access to kernel-level...

PT-2026-58420

Untrusted pointer dereference in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

PT-2026-58299

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to perform local information disclosure. This issue occurs when the software accesses a memory address through ...

PT-2026-58581

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

PT-2026-58348

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A null pointer dereference—a condition where a program attempts to read a memory location that is null—exists in Active Directory Domain Services. This allows an...

CVE-2026-50315: NULL Pointer Dereference

Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

CVE-2026-48580: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

ROS-20260714-73-0001

The vulnerability of the MySQL protocol analyzer and traffic analyzer for computer networks by Wireshark is related to access to an uninitialized pointer. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260714-73-0002

The vulnerability of the RTSP protocol analyzer and the network traffic analyzer in Wireshark is related to pointer manipulation. Exploiting this vulnerability can allow attackers to cause service failures...

ROS-20260714-73-0058

The vulnerability in libtiff is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-48340: Untrusted Pointer Dereference

Bridge is affected by an Untrusted Pointer Dereference vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...