UBUNTU-CVE-2026-82054

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

EUVD-2026-73729

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72956

CVE-2026-72956 is an untrusted pointer dereference in Microsoft Office PowerPoint that allows an unauthorized attacker to disclose information over a network . The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.5 (MEDIUM) with high confidentiality impact but no integri...

CVE-2026-70575

CVE-2026-70575 is a null pointer dereference in Windows Schannel (the Windows Secure Channel TLS/SSL component) that allows an authorized attacker (low privileges required) to trigger a denial of service over a network. The attack requires high complexity , no user interaction, and results in ava...

EUVD-2026-73652

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

SUSE CVE-2026-80819

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: take rfcommmutex for the deferred setup accept rfcommsockrecvmsg completes a deferred setup by calling rfcommdlcaccept without holding any RFCOMM lock: if testandclearbitRFCOMMDEFERSETUP, &d-flags...

CVE-2026-69874

CVE-2026-69874 is a local privilege escalation vulnerability in Windows ALPC (Advanced Local Procedure Call) caused by an untrusted pointer dereference . An authorized attacker with local high-privilege access can exploit this to elevate privileges further. The vulnerability carries a CVSS 3.1 sc...

EUVD-2026-73637

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

EUVD-2026-73618

Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69900

CVE-2026-69900 is an untrusted pointer dereference in the Kernel Streaming WOW Thunk Service Driver (a Windows kernel-mode driver) that allows a locally authenticated attacker to escalate privileges . Microsoft rated it HIGH (CVSS 7.8) with local attack vector, low complexity, low privileges requ...

CVE-2026-69881

CVE-2026-69881 is a null pointer dereference in the Windows Internet Key Exchange (IKE) Extension that allows an unauthenticated, network-based attacker to trigger a denial of service. The CVSS 3.1 score is 7.5 (HIGH) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H , meaning the impact is limited...

EUVD-2026-73563

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69569

CVE-2026-69569 is an untrusted pointer dereference in Windows Print Spooler Components that allows an authorized attacker to cause a denial of service over a network. The CVSS v3.1 score is 5.7 (Medium) , with high availability impact but no confidentiality or integrity impact. Exploitation requi...

EUVD-2026-73540

Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...

EUVD-2026-73499

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69475

CVE-2026-69475 is an elevation of privilege vulnerability in Windows Remote Desktop Services , caused by an untrusted pointer dereference . An authorized local attacker with low privileges can exploit this with low complexity and no user interaction to gain high impact across confidentiality, int...

EUVD-2026-73473

Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...

CVE-2026-69384

A null pointer dereference in the Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized local attacker to trigger a denial of service . The CVSS 3.1 score is 7.1 (HIGH) with a scope change, reflecting the local attack vector with no privileges required. CISA's SSVC assessment indicates n...

EUVD-2026-73371

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-62762

CVE-2026-62762 is a null pointer dereference in Windows Active Directory Domain Services that allows an authorized attacker (low privileges required) to cause a denial of service over a network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, reflecting h...