CVE-2026-111373 | Medium | 5.3 | 2026-10-16 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending… |
CVE-2026-111144 | Medium | 5.5 | 2026-10-15 | libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilove_xbin() that allows attackers to crash applications by supplying a… |
CVE-2026-111129 | Medium | 5.5 | 2026-10-15 | Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::R… |
CVE-2026-111128 | Medium | 5.5 | 2026-10-15 | Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone… |
CVE-2026-100353 | High | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6w… |
CVE-2026-97394 | High | 7.5 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts OpenAPI 3.1 array schemas without an items keyword a… |
CVE-2026-100349 | | | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse passes a nil response header schema to decodeValue wh… |
CVE-2026-100348 | Medium | 5.3 | 2026-10-15 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a nil SchemaRef.Value while resolving a self-referent… |
CVE-2026-24723 | | | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2026-24722 | | | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2026-24721 | | | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulne… |
CVE-2026-101302 | Medium | 6.5 | 2026-10-15 | TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding. The code which searches for the… |
CVE-2025-29896 | | | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2025-29895 | | | 2026-10-15 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulner… |
CVE-2026-110834 | Medium | 6.5 | 2026-10-14 | FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecyc… |
CVE-2026-110829 | Medium | 6.5 | 2026-10-14 | FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_… |
CVE-2026-101961 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP… |
CVE-2026-101949 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remot… |
CVE-2026-102086 | Medium | 5.9 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to caus… |
CVE-2026-102060 | Medium | 6.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS on MX Series and Junos OS Evolved on ACX Series allows an unauthentica… |
CVE-2026-102040 | Medium | 6.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacke… |
CVE-2026-102039 | Medium | 6.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a denial of… |
CVE-2026-102029 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated confi… |
CVE-2026-102028 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cau… |
CVE-2026-102021 | Medium | 6.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent network atta… |
CVE-2026-102018 | Medium | 6.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to ca… |
CVE-2026-102013 | Medium | 4.4 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with acce… |
CVE-2026-101988 | Medium | 6.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjac… |
CVE-2026-101977 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer t… |
CVE-2026-101973 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of serv… |
CVE-2026-101948 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated… |
CVE-2026-101941 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbo… |
CVE-2026-101940 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP p… |
CVE-2026-101939 | High | 7.5 | 2026-10-14 | A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sendin… |
CVE-2026-110659 | Medium | 5.5 | 2026-10-14 | ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via… |
CVE-2026-100394 | Medium | 6.5 | 2026-10-14 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/sing… |
CVE-2026-110600 | Medium | 5.5 | 2026-10-14 | xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that al… |
CVE-2026-77207 | High | 7.5 | 2026-10-13 | Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type… |
CVE-2026-77206 | High | 7.5 | 2026-10-13 | Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 s… |
CVE-2026-95640 | Medium | 5.5 | 2026-10-13 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this… |
CVE-2026-105896 | Medium | 5.5 | 2026-10-13 | Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this… |
CVE-2026-103829 | Medium | 5.5 | 2026-10-13 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit… |
CVE-2026-103828 | Medium | 5.5 | 2026-10-13 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit… |
CVE-2026-103826 | Medium | 5.5 | 2026-10-13 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit… |
CVE-2026-103824 | Medium | 5.5 | 2026-10-13 | Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit… |
CVE-2026-103855 | Medium | 5.5 | 2026-10-13 | Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera… |
CVE-2026-103852 | Medium | 5.5 | 2026-10-13 | Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit t… |
CVE-2026-97767 | High | 8.8 | 2026-10-13 | Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
CVE-2026-96953 | High | 7.8 | 2026-10-13 | Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally. |
CVE-2026-88079 | High | 7.0 | 2026-10-13 | Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. |
CVE-2026-88076 | High | 7.0 | 2026-10-13 | Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally. |
CVE-2026-85859 | Medium | 6.5 | 2026-10-13 | Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network. |
CVE-2026-84017 | High | 7.5 | 2026-10-13 | Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network. |
CVE-2026-83665 | High | 7.5 | 2026-10-13 | Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network. |
CVE-2026-83648 | Medium | 6.5 | 2026-10-13 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-83636 | Medium | 6.5 | 2026-10-13 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
CVE-2026-83571 | Medium | 5.5 | 2026-10-13 | Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally. |
CVE-2026-70566 | High | 7.8 | 2026-10-13 | Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally. |
CVE-2026-70248 | Medium | 6.5 | 2026-10-13 | Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally. |
CVE-2026-69978 | Medium | 5.6 | 2026-10-13 | Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. |
CVE-2026-69795 | High | 7.0 | 2026-10-13 | Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-104343 | Medium | 5.5 | 2026-10-13 | Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this… |
CVE-2026-104004 | Medium | 6.5 | 2026-10-13 | MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server proc… |
CVE-2026-95122 | High | 7.5 | 2026-10-13 | mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp. This allows a remote attacker to cause a denial… |
CVE-2026-77095 | | | 2026-10-13 | CvFWD contained a null pointer dereference affecting service availability. Software customers upgrade to resolved maintenance release. Update all Commvault in… |
CVE-2026-109967 | High | 7.5 | 2026-10-13 | yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC method that allows remote unauthenticated attacke… |
CVE-2026-109942 | Medium | 6.5 | 2026-10-13 | FreeRDP 2.3.0 before 3.32.0 dereferences a NULL stream in rdg_process_close_packet in libfreerdp/core/gateway/rdg.c because rdg_process_control_packet accepts… |
CVE-2026-109939 | Medium | 6.5 | 2026-10-13 | FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in update_read_cache_bitmap_v3_order() in libfreerdp/core/orders.c, which accesses the client… |
CVE-2026-109679 | Medium | 5.3 | 2026-10-13 | FreeRDP 3.0.0-beta4 before 3.32.0 contains a NULL pointer dereference in arm_handle_request_ok when an ARM endpoint returns an empty HTTP 200 body. Attackers c… |
CVE-2026-109107 | Medium | 6.5 | 2026-10-13 | A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of… |
CVE-2026-109280 | Low | 2.5 | 2026-10-12 | ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx option that occurs when a memory allocation fails during a specific ope… |
CVE-2026-109272 | Low | 3.7 | 2026-10-12 | ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is triggered when a policy limit is reached. Attackers… |
CVE-2026-109258 | Low | 2.5 | 2026-10-12 | ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the fx operation that occurs when initialization of an FX runtime entry f… |
CVE-2026-109252 | Medium | 5.3 | 2026-10-12 | FreeRDP from 3.9.0 before 3.32.0 contains a NULL pointer dereference vulnerability in the RDPEAR NDR reader that allows malicious servers to crash clients via… |
CVE-2026-109241 | Low | 3.1 | 2026-10-12 | FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the client video redirection channel that allows malicious servers to crash clients… |
CVE-2026-19737 | Medium | 5.5 | 2026-10-11 | i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX and I2S_DIR_TX branches read dev_c… |
CVE-2026-108093 | Medium | 5.5 | 2026-10-09 | A flaw was found in GIMP. The XCF loader processes image-simulation-intent and image-simulation-bpc parasites without ensuring the parasite data is present bef… |
CVE-2026-104114 | | | 2026-10-09 | A NULL pointer dereference in the illumos Network Auto-Magic daemon (nwamd) allows a local user to crash the daemon. nwamd_door_switch() in usr/src/cmd/cmd-ine… |
CVE-2026-108063 | Medium | 5.5 | 2026-10-09 | A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By prov… |
CVE-2026-107655 | Medium | 4.0 | 2026-10-09 | A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an unh… |
CVE-2026-107890 | Low | 3.3 | 2026-10-09 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed sep… |
CVE-2026-107888 | Medium | 5.1 | 2026-10-09 | OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs() when a job marked job-held-on-create refers to a temporary printer that… |
CVE-2026-107733 | | | 2026-10-08 | SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, FrameOnCommand() handles CmdExec by passing a null current-tab pointer to RunWithExe()… |
CVE-2026-107778 | Medium | 6.5 | 2026-10-08 | MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that allows authenticated Kerberos clients to crash s… |
CVE-2026-107708 | Medium | 4.9 | 2026-10-08 | MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_realm() that returns success while leaving the client… |
CVE-2026-16165 | High | 7.5 | 2026-10-08 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacke… |
CVE-2026-107613 | Medium | 5.9 | 2026-10-08 | A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Windows before 2.8.88 allows an attacker to crash th… |
CVE-2026-16182 | Medium | 5.9 | 2026-10-08 | IBM DataPower Gateway 10.5.0.0 through 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow… |
CVE-2026-107222 | Medium | 6.5 | 2026-10-07 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required ch… |
CVE-2026-107213 | Medium | 5.5 | 2026-10-07 | Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws… |
CVE-2026-107169 | Medium | 6.2 | 2026-10-07 | A flaw was found in m17n-lib. An attacker could provide specially crafted or truncated UTF-8 input to trigger an unhandled null pointer dereference during text… |
CVE-2026-107170 | Low | 2.9 | 2026-10-07 | A flaw was found in m17n-lib. A partial failure during library initialization can leave an internal driver pointer uninitialized. Under specific error conditio… |
CVE-2026-102169 | Medium | 6.5 | 2026-10-06 | On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the… |
CVE-2026-104044 | Medium | 6.2 | 2026-10-06 | A flaw was found in sssd. A local attacker can trigger a Denial of Service (DoS) by sending a specially crafted Pluggable Authentication Module (PAM) request w… |
CVE-2026-104038 | Medium | 5.9 | 2026-10-06 | A flaw was found in sssd. A remote attacker can cause a denial of service (DoS) by submitting a certificate that lacks an expected Security Identifier (SID) ex… |
CVE-2026-93316 | | | 2026-10-05 | If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident. |
CVE-2026-66859 | | | 2026-10-02 | NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings.
This issue affects Apache Thrift: before 0.25.0.
… |
CVE-2026-87117 | | | 2026-10-02 | NULL pointer dereference vulnerability in Apache Thrift PHP bindings.
This issue affects Apache Thrift: before 0.25.0.
Users are recommended to upgrade t… |
CVE-2026-82357 | Medium | 6.5 | 2026-10-01 | RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application ma… |
CVE-2026-9032 | | | 2026-10-01 | Tapo C120 v1 and C200 v5
contain a NULL pointer dereference in the HTTPS onboarding connect request parser. The interface is reachable without
authentication… |