112358 matches found
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
CVE-2026-86513
A remote, unauthenticated resource allocation vulnerability exists in the JSON Pointer parser component of java-json-tools jackson-coreutils 2.0 , specifically in the TreePointer.tokensFromInput function within TreePointer.java. The flaw can be triggered remotely without authentication, resulting...
CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources
A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...
kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable
A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...
Critical: Red Hat Security Advisory: 389-ds-base security, bug fix, and enhancement update
An update for 389-ds-base is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results and USE_ONE_BACKEND control in op_shared_search
A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...
CVE-2026-16005
Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing the driver's verification, which can corrupt data structures and cause a system crash BSOD.Refer to the ' Security Update for Armoury Crate App '...
SUSE CVE-2026-80822
In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: Add null check for devmkasprintf Add a check to see if devmkasprintf is not NULL in mchpipcgetclusteraggrirq, returning -ENOMEM if the function failed...
CVE-2026-66303: NULL Pointer Dereference
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-84392: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...
CVE-2026-78451: Untrusted Pointer Dereference
Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-78444: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
CVE-2026-77901: NULL Pointer Dereference
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-72956: Untrusted Pointer Dereference
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-69900: Untrusted Pointer Dereference
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69881: NULL Pointer Dereference
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
CVE-2026-69569: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
CVE-2026-69475: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...