CVE-2026-47584 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel module where an attacker with local access could cause a NULL pointer dereference… |
CVE-2026-47563 | High | 7.8 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause a NULL pointer dereference. A successful exploit… |
CVE-2026-47557 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause a NULL pointer dereference. A succ… |
CVE-2026-47549 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel module where an unprivileged local user could cause a NULL pointer dereference. A su… |
CVE-2026-47531 | Medium | 4.4 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause a null pointer dereference. A s… |
CVE-2026-47526 | Medium | 4.4 | 2026-09-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause a null pointer dereference. A successful… |
CVE-2026-47517 | Medium | 5.5 | 2026-09-30 | NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode driver where a local user may cause a null pointer dereference by submitting a… |
CVE-2026-92871 | High | 7.5 | 2026-09-30 | A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to cause abnormal termination of the watchdog process. |
CVE-2026-86134 | | | 2026-09-30 | A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management… |
CVE-2026-86136 | | | 2026-09-30 | A missing authorization vulnerability in the wgagent management daemon's session initialization function allows an authenticated, low-privileged user (includin… |
CVE-2026-86128 | | | 2026-09-30 | A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, unauthenticated attacker to cause a denial of serv… |
CVE-2026-102808 | Medium | 6.5 | 2026-09-29 | PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability in the sd_stress command where the -b byte count parameter is parsed without val… |
CVE-2026-102724 | | | 2026-09-29 | NULL Pointer Dereference When Evicting the Sole MSRP Attribute |
CVE-2026-102723 | | | 2026-09-29 | NULL Pointer Dereference on MSRP Attribute Table Exhaustion |
CVE-2026-102623 | Medium | 6.5 | 2026-09-29 | A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs) can cause a Denial of Service (DoS) by submittin… |
CVE-2026-75805 | Medium | 5.3 | 2026-09-29 | Issue summary: A CMP client that requests certificate revocation on the basis
of a PKCS#10 CSR may dereference a NULL pointer and terminate abnormally when
pro… |
CVE-2026-95390 | Medium | 5.5 | 2026-09-29 | PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service |
CVE-2026-18746 | Medium | 5.9 | 2026-09-29 | parse_write_op() in subsys/net/lib/lwm2m/lwm2m_message_handling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of… |
CVE-2026-100895 | Medium | 5.3 | 2026-09-28 | A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the function arc_parse_canon_t in the library libopenarc/a… |
CVE-2026-100890 | Medium | 5.3 | 2026-09-28 | A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarc_spf_ipv6_explode in the library… |
CVE-2026-88389 | Medium | 6.2 | 2026-09-25 | Espruino 2v29 (commit bffc6d0) contains a NULL pointer dereference vulnerability in jslGetRawString() in src/jslex.c. Crafted raw/binary string input can cause… |
CVE-2026-88384 | Medium | 5.5 | 2026-09-24 | OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribute parsing path. A specially crafted EXR file containing an unknown-type attribute with da… |
CVE-2026-88373 | High | 7.5 | 2026-09-24 | libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_push_NAL() is called with a zero-length NAL unit… |
CVE-2026-19888 | High | 7.5 | 2026-09-23 | Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to c… |
CVE-2026-42801 | High | 7.4 | 2026-09-23 | NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc module) allows Pointer Manipulation.
This vulnerability is associated with program… |
CVE-2026-88339 | Medium | 5.5 | 2026-09-22 | A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV). The vulnerability occurs when cloning a… |
CVE-2026-84396 | Medium | 5.5 | 2026-09-22 | InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this… |
CVE-2026-76192 | Medium | 5.5 | 2026-09-22 | InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this… |
CVE-2026-86056 | Medium | 5.5 | 2026-09-22 | Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPM_SAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a s… |
CVE-2026-73547 | High | 7.5 | 2026-09-21 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ext_authz filter a… |
CVE-2026-48521 | Medium | 5.9 | 2026-09-21 | Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManager… |
CVE-2026-57225 | Low | 3.3 | 2026-09-18 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, src/datasets-cont… |
CVE-2026-93689 | Medium | 5.5 | 2026-09-18 | WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the vo… |
CVE-2026-93588 | Low | 3.1 | 2026-09-18 | ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When the coder reaches a memory (resource) limit at a sp… |
CVE-2026-93312 | Medium | 4.3 | 2026-09-18 | A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes… |
CVE-2026-76781 | Medium | 5.5 | 2026-09-17 | A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog pa… |
CVE-2026-92417 | Medium | 6.5 | 2026-09-16 | A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the library lib/pfcp/types.c of the component… |
CVE-2026-38999 | High | 7.5 | 2026-09-16 | A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers to cause a Denial… |
CVE-2026-92413 | Medium | 4.3 | 2026-09-16 | A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdf_open_filter of the fi… |
CVE-2026-92626 | High | 7.5 | 2026-09-16 | Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service.
The /api/dguardintegration/dguardVersion endpoint derefer… |
CVE-2026-77692 | High | 7.5 | 2026-09-16 | An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically invalid SIG(0) record, and then closing the transpo… |
CVE-2026-76868 | Medium | 4.9 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi caused by a missing exit_port parameter. Attackers… |
CVE-2026-76865 | Medium | 4.9 | 2026-09-15 | Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI handlers filter_conn_del_cgi.c and gre_prio_set_cgi… |
CVE-2026-91954 | Medium | 6.5 | 2026-09-15 | FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Surface Bits commands with NSCodec codec ID. A mali… |
CVE-2026-92051 | Critical | 9.1 | 2026-09-15 | Spoofing issue due to invalid pointer in the Graphics component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. |
CVE-2026-91782 | Low | 3.3 | 2026-09-15 | A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the… |
CVE-2026-91781 | Low | 3.3 | 2026-09-15 | A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the… |
CVE-2026-91780 | Low | 3.3 | 2026-09-15 | A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation… |
CVE-2026-91779 | Low | 3.3 | 2026-09-15 | A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the comp… |
CVE-2026-90830 | Medium | 5.3 | 2026-09-14 | A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Se… |
CVE-2026-90829 | Medium | 5.3 | 2026-09-14 | A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROU… |
CVE-2026-90828 | Medium | 5.3 | 2026-09-14 | A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component… |
CVE-2026-65412 | Medium | 6.5 | 2026-09-14 | A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Ga… |
CVE-2026-53719 | Medium | 6.5 | 2026-09-14 | Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, translateSe… |
CVE-2026-55209 | Critical | 9.8 | 2026-09-14 | resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9, resdata insufficiently validates numeric fields… |
CVE-2026-16702 | Medium | 6.5 | 2026-09-14 | IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a remote authenticated attacker… |
CVE-2026-90802 | Medium | 4.4 | 2026-09-14 | A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes… |
CVE-2026-90995 | Medium | 5.5 | 2026-09-14 | A flaw was found in SSSD (System Security Services Daemon). A local attacker with privileges to connect to the PAM (Pluggable Authentication Modules) responder… |
CVE-2026-90792 | Medium | 4.3 | 2026-09-14 | A flaw has been found in GPAC up to f1219cde. This issue affects the function gf_node_list_get_child of the file scenegraph/base_scenegraph.c of the component… |
CVE-2026-90622 | Low | 3.3 | 2026-09-14 | A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Perfo… |
CVE-2026-33970 | Low | 3.5 | 2026-09-14 | An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400… |
CVE-2026-90609 | Low | 3.3 | 2026-09-14 | A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box… |
CVE-2026-15891 | High | 7.5 | 2026-09-13 | The MQTT-SN client keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c removes the gateway record after PINGREQ retries are exhausted. It invo… |
CVE-2026-90576 | Low | 3.3 | 2026-09-13 | A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gf_node_list_add_child of the file scenegraph/base_scenegraph.c of… |
CVE-2026-90573 | Low | 3.3 | 2026-09-13 | A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the componen… |
CVE-2026-90782 | Medium | 5.3 | 2026-09-13 | S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataCh… |
CVE-2026-90485 | Medium | 5.5 | 2026-09-12 | A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub_11838 of the file IURegistryFilter.sys of the component IOCTL… |
CVE-2026-78130 | High | 7.5 | 2026-09-11 | strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser. |
CVE-2026-78126 | Medium | 5.9 | 2026-09-11 | strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin. |
CVE-2026-79590 | Medium | 6.5 | 2026-09-10 | A NULL pointer dereference vulnerability exists in the Prism parser component of mruby 4.0.0. An attacker can provide a specially crafted Ruby source file that… |
CVE-2026-45747 | High | 7.5 | 2026-09-10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS cert… |
CVE-2026-86547 | Medium | 6.2 | 2026-09-09 | mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the op_enter() handler in src/vm.c when processing untrusted bytecode. Attackers can… |
CVE-2026-66303 | Medium | 6.5 | 2026-09-08 | Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. |
CVE-2026-77901 | High | 8.8 | 2026-09-08 | Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
CVE-2026-77489 | High | 7.8 | 2026-09-08 | Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-72949 | High | 7.5 | 2026-09-08 | Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to deny service over a network. |
CVE-2026-72939 | Medium | 6.5 | 2026-09-08 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to deny service over a network. |
CVE-2026-70575 | Medium | 5.3 | 2026-09-08 | Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network. |
CVE-2026-69881 | High | 7.5 | 2026-09-08 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
CVE-2026-69744 | High | 7.5 | 2026-09-08 | Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network. |
CVE-2026-69587 | High | 7.5 | 2026-09-08 | Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network. |
CVE-2026-69384 | High | 7.1 | 2026-09-08 | Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally. |
CVE-2026-62762 | Medium | 6.5 | 2026-09-08 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-84392 | Low | 2.7 | 2026-09-08 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 a… |
CVE-2026-82055 | Medium | 6.5 | 2026-09-08 | A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted Ge… |
CVE-2026-18453 | High | 7.5 | 2026-09-07 | A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_shared_search allows an unauthenticated remote attac… |
CVE-2026-86097 | Medium | 6.5 | 2026-09-04 | PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in param_set_default_file() and param_set_backup_file() functions that allows at… |
CVE-2026-75439 | High | 7.5 | 2026-09-04 | An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component |
CVE-2026-80118 | High | 7.1 | 2026-09-04 | PassMark PerformanceTest before 11.1 build 1012, BurnInTest before 11.1 build 1000, and OSForensics before 11.1 build 1016 contain an unauthenticated physical… |
CVE-2026-17273 | Medium | 6.5 | 2026-09-04 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a NULL pointer dereference. |
CVE-2026-85150 | High | 7.5 | 2026-09-03 | A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate head… |
CVE-2026-17539 | Medium | 5.9 | 2026-09-03 | RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cause a NULL pointer dereference in the last entry o… |
CVE-2026-78222 | High | 7.5 | 2026-09-02 | A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX worker when trusted JavaScript reads Resp… |
CVE-2026-82926 | Medium | 5.5 | 2026-09-01 | NULL pointer dereference vulnerability in Samsung Open Source mTower allows Pointer Manipulation.
This issue affects mTower: before afef59aa6f55c5d5ebf9b14bc0… |
CVE-2026-82821 | Medium | 4.3 | 2026-08-31 | A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amf_object_get of the file src/amf.c of the component AMF… |
CVE-2026-82803 | Medium | 5.3 | 2026-08-31 | A vulnerability has been found in armink struct2json 1.0. This affects the function S2J_STRUCT_GET_string_ELEMENT in the library struct2json/inc/s2jdef.h of th… |
CVE-2026-82588 | Medium | 4.3 | 2026-08-30 | A vulnerability was identified in Open5GS up to 2.7.7. This issue affects some unknown processing of the file src/amf/namf-handler.c of the component Transfer… |
CVE-2026-81490 | High | 7.7 | 2026-08-28 | A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by definin… |
CVE-2026-76650 | | | 2026-08-28 | A NULL
pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing
SOAP state variable query requests. A specially crafted SO… |
CVE-2026-76649 | | | 2026-08-28 | A NULL
pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action requ… |