CVE-2026-77489: NULL Pointer Dereference

Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72939: NULL Pointer Dereference

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

CVE-2026-69717: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69587: NULL Pointer Dereference

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

PT-2026-109401

Уязвимость службы биометрии Biometric Service операционных систем Windows связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-109367

Уязвимость службы Device Association Service операционных систем Windows связана с освобождением неверного указателя или ссылки. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-109363

Уязвимость компонента Failover Cluster отказоустойчивый кластер операционных систем Windows связана с разыменованием недоверенного указателя. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-88282

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

PT-2026-87871

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-69874: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-77500: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-87147

Name of the Vulnerable Software and Affected Versions MongoDB server affected versions not specified Description A security issue exists in the JSON Pointer parser used during $jsonSchema query filter processing. When a find command contains a specially crafted $jsonSchema filter field, the parse...

389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

Linux GPU Driver NULL Pointer Dereference

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-43603| A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.| 6.9...

EulerOS 2.0 SP12 : haproxy (EulerOS-SA-2026-3267)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

CVE-2026-69744: NULL Pointer Dereference

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69501: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

RHEL 9 : 389-ds-base (RHSA-2026:64784)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64784 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 10 : 389-ds-base (RHSA-2026:64804)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64804 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...