CVE-2026-77489: NULL Pointer Dereference

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72939: NULL Pointer Dereference

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

CVE-2026-69717: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69587: NULL Pointer Dereference

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

PT-2026-109401

Уязвимость службы биометрии Biometric Service операционных систем Windows связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-109367

Уязвимость службы Device Association Service операционных систем Windows связана с освобождением неверного указателя или ссылки. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-109363

Уязвимость компонента Failover Cluster отказоустойчивый кластер операционных систем Windows связана с разыменованием недоверенного указателя. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-88282

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

PT-2026-87871

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-69874: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-77500: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-87147

Name of the Vulnerable Software and Affected Versions MongoDB server affected versions not specified Description A security issue exists in the JSON Pointer parser used during $jsonSchema query filter processing. When a find command contains a specially crafted $jsonSchema filter field, the parse...

389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

CVE-2026-69744: NULL Pointer Dereference

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69501: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

RHEL 9 : 389-ds-base (RHSA-2026:64784)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64784 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 10 : 389-ds-base (RHSA-2026:64804)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64804 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64790)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64790 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

PT-2026-87182

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...