PT-2026-109401

Уязвимость службы биометрии Biometric Service операционных систем Windows связана с ошибками разыменования указателей. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-109363

Уязвимость компонента Failover Cluster отказоустойчивый кластер операционных систем Windows связана с разыменованием недоверенного указателя. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

CVE-2026-82054: Allocation of Resources Without Limits or Throttling

A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...

Linux lib/rhashtable.c DoS

The vulnerability in the kernel component lib/rhashtable.c of the Linux operating system is related to dereferencing a pointer with an expired lifetime. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

PT-2026-86981

Name of the Vulnerable Software and Affected Versions java-json-tools jackson-coreutils version 2.0 Description A flaw in the JSON Pointer parser component allows remote attackers to cause excessive resource allocation. This issue occurs within the TreePointer.tokensFromInput function located in...

PT-2026-87182

A NULL Pointer Dereference vulnerability CWE-476 vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all...

PT-2026-87977

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A null pointer dereference occurs in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A null...

PT-2026-87988

🚨 HIGH: CVE-2026-78444 CVSS 8.1 Untrusted pointer dereference in Windows Failover Cluster enables remote code execution over network. No authentication required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/JlgAg4R9uL...

PT-2026-88103

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description An untrusted pointer dereference in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-88042

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-88105

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-87811

Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...

PT-2026-87696

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

PT-2026-87500

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description An untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a...

PT-2026-87228

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. A pointer dereference occurs when a program...

ALSA-2026:64784 Critical: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...

PT-2026-87771

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

EulerOS 2.0 SP12 : haproxy (EulerOS-SA-2026-3267)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 5985276, contains an integer overflow vulnerability in the fcgiconn structure's drl field that allows buff...

Oracle Linux 9 : ELSA-2026-64784-0: / 389-ds-base (ELSA-2026-647840)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647840 advisory. - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

RHEL 9 : redhat-ds:12 (RHSA-2026:64779)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64779 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...