CVE-2026-55401 | | | 2026-08-13 | CVE-2026-55401 is a null dereference vulnerability on the load-balancing
sub-system of Secure Access servers prior to 14.57. Attackers can send
an unauthenti… |
CVE-2026-18699 | Medium | 6.5 | 2026-08-11 | An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly b… |
CVE-2026-65681 | High | 7.5 | 2026-08-11 | Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network. |
CVE-2026-62702 | Medium | 6.8 | 2026-08-11 | Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network. |
CVE-2026-61345 | Medium | 6.5 | 2026-08-11 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. |
CVE-2026-59138 | Medium | 6.5 | 2026-08-11 | Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network. |
CVE-2026-59132 | High | 7.5 | 2026-08-11 | Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network. |
CVE-2026-48438 | High | 7.5 | 2026-08-11 | CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploi… |
CVE-2026-20878 | | | 2026-08-11 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adver… |
CVE-2026-20787 | | | 2026-08-11 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service. Network adver… |
CVE-2026-20727 | | | 2026-08-11 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software… |
CVE-2026-18638 | Medium | 6.5 | 2026-08-11 | Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling Set… |
CVE-2026-12051 | Medium | 4.6 | 2026-08-11 | The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer dereference in handle_download() (subsys/u… |
CVE-2026-19411 | Low | 3.9 | 2026-08-10 | A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of se… |
CVE-2026-11810 | High | 7.5 | 2026-08-10 | The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the up… |
CVE-2026-71967 | Medium | 5.5 | 2026-08-10 | OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows… |
CVE-2026-72582 | High | 7.5 | 2026-08-10 | A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP… |
CVE-2026-17510 | High | 7.5 | 2026-08-09 | Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL pointer dereference in print_attribute via a zero length BMPSTRING attribute.
print_attribut… |
CVE-2026-52878 | High | 7.5 | 2026-08-07 | Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a proto… |
CVE-2026-19012 | Medium | 5.3 | 2026-08-07 | Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are vulnerable to an authenticated denial of service in the Enterprise-to-Community Edition… |
CVE-2026-48097 | High | 7.8 | 2026-08-07 | NexTor IP Changer is a command-line tool that leverages the Tor network to periodically rotate a user's IP address. Versions prior to 2.0.0 have a command exec… |
CVE-2026-45204 | Medium | 5.5 | 2026-08-07 | Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger OOB access and kernel null pointer dereference in an error… |
CVE-2026-70640 | High | 7.0 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() and free_1cont… |
CVE-2026-70639 | Medium | 5.5 | 2026-08-06 | llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails… |
CVE-2026-67870 | Critical | 9.8 | 2026-08-06 | In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacke… |
CVE-2026-19026 | | | 2026-08-05 | H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_values[4] without validating that cd_values is non-NULL or that cd_nel… |
CVE-2026-19024 | | | 2026-08-05 | NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers to cause a denial of service via a dataset whose version 1 or 2 fill value… |
CVE-2026-46334 | | | 2026-08-05 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the S… |
CVE-2026-45084 | | | 2026-08-04 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in the presence m… |
CVE-2026-67304 | High | 7.5 | 2026-08-01 | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard device control request cleanup when reader-state decoding fails. Attackers… |
CVE-2026-67288 | High | 7.5 | 2026-08-01 | FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in SCA… |
CVE-2026-18064 | High | 7.5 | 2026-07-30 | An incomplete fix for CVE-2026-15352 in the NASA core Flight System
(cFS) Health and Safety (HS) application leaves a separate NULL pointer
dereference reach… |
CVE-2026-58161 | High | 7.5 | 2026-07-29 | Apache Traffic Server can crash from null dereferences and dangling references in TLS and SNI handling.
This issue affects Apache Traffic Server: from 8.0.0 t… |
CVE-2026-67184 | High | 7.5 | 2026-07-28 | TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a mal… |
CVE-2026-66749 | Medium | 6.5 | 2026-07-28 | Let's Chat 0.4.0 through 0.4.8 contains a null dereference vulnerability that allows authenticated attackers to crash the server by supplying a valid 24-charac… |
CVE-2026-47427 | High | 7.5 | 2026-07-28 | GitHub MCP Server is GitHub's official MCP Server. Prior to 1.1.0, the CompletionsHandler function in pkg/github/server.go accesses params.Ref without first ch… |
CVE-2026-17574 | | | 2026-07-27 | HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type fi… |
CVE-2026-17500 | Medium | 5.3 | 2026-07-27 | A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The… |
CVE-2026-64297 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved:
module: decompress: check return value of module_extend_max_pages()
module_extend_max_pag… |
CVE-2026-64295 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved:
mm: page_ext: add count limit to page_ext_iter_next to prevent invalid PFN access
The pag… |
CVE-2026-64288 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB
VNCR TLB invalidation occurs fro… |
CVE-2026-64258 | Medium | 5.5 | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved:
fuse-uring: remove request-less entries from ent_w_req_queue to fix NULL deref
If a copy… |
CVE-2026-64253 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
kernel/fork: clear PF_BLOCK_TS in copy_process()
PF_BLOCK_TS is only set in blk_time_get_… |
CVE-2026-64234 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
tty: serial: pch_uart: add check for dma_alloc_coherent()
Add a check for dma_alloc_coher… |
CVE-2026-64230 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
regulator: tps65219: fix irq_data.rdev not being assigned
Commit 64a6b577490c ("regulator… |
CVE-2026-64229 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
x86/mm: Disable broadcast TLB flush when PCID is disabled
Booting with "nopcid" clears X8… |
CVE-2026-64228 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: phy: avoid NULL deref when PHY driver is unbound
phydev->drv can become NUL… |
CVE-2026-64227 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
ACPI: driver: Check ACPI_COMPANION() against NULL during probe
Since every platform drive… |
CVE-2026-64215 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
Check the return value of… |
CVE-2026-64214 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise()
… |
CVE-2026-64212 | Medium | 5.5 | 2026-07-24 | In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
In iwl_mld_remove… |
CVE-2026-45816 | High | 7.5 | 2026-07-24 | NULL Pointer Dereference vulnerability in Apache NimBLE in LE Long Term Key Request event.
This requires disabled asserts (otherwise assert would trigger befo… |
CVE-2026-50032 | High | 7.5 | 2026-07-23 | A NULL pointer dereference in the MMS Write Named Variable List handler, which may allow a network adjacent attacker to crash the server by sending a WriteRequ… |
CVE-2026-13070 | Medium | 5.3 | 2026-07-22 | A MongoDB server initiating an outbound TLS connection may terminate abnormally when processing a malformed OCSP response from a remote peer during the TLS han… |
CVE-2026-13065 | Medium | 6.5 | 2026-07-22 | A user with read-only privileges is able to craft an aggregation pipeline using the $linearFill window function operator with a specific sortBy expression type… |
CVE-2026-55717 | Medium | 5.9 | 2026-07-22 | In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: <net> redirect' /'response-ip-data: <ne… |
CVE-2026-47709 | Medium | 5.5 | 2026-07-21 | libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a… |
CVE-2026-10678 | High | 8.1 | 2026-07-21 | The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte… |
CVE-2026-47143 | Medium | 5.1 | 2026-07-21 | Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in `modRMRequired()` and `decode()` when disassem… |
CVE-2026-16353 | Critical | 9.8 | 2026-07-21 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153… |
CVE-2026-64207 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved:
net/sched: dualpi2: fix GSO backlog accounting
When DualPI2 splits a GSO skb into N segme… |
CVE-2026-64192 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized
When CONFIG_B… |
CVE-2026-64190 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved:
net: team: fix NULL pointer dereference in team_xmit during mode change
__team_change_mod… |
CVE-2026-64187 | Medium | 5.5 | 2026-07-20 | In the Linux kernel, the following vulnerability has been resolved:
xfs: fail recovery on a committed log item with no regions
If the first op of a transacti… |
CVE-2026-47276 | Medium | 6.5 | 2026-07-20 | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `properties_parse()` allows an authenticated attacker to crash the NanoMQ broker by sendi… |
CVE-2026-47275 | Low | 2.6 | 2026-07-20 | In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in `nni_mqttv5_msg_decode_connect()` allows a malicious MQTT broker to crash any connecting… |
CVE-2026-63762 | Medium | 6.5 | 2026-07-20 | SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via… |
CVE-2026-64183 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
efi: Allocate runtime workqueue before ACPI init
Since commit
5894cf571e14 ("acpi/prmt… |
CVE-2026-64170 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
spi: qup: fix error pointer deref after DMA setup failure
The driver falls back to PIO mo… |
CVE-2026-64169 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
spi: ep93xx: fix error pointer deref after DMA setup failure
The driver falls back to PIO… |
CVE-2026-64168 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
spi: sprd: fix error pointer deref after DMA setup failure
The driver falls back to PIO m… |
CVE-2026-64167 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
kho: skip KHO for crash kernel
kho_fill_kimage() unconditionally populates the kimage wit… |
CVE-2026-64166 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
firmware: arm_ffa: Check for NULL FF-A ID table while driver registration
The bus match c… |
CVE-2026-64165 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
ARM: integrator: Fix early initialization
Starting with commit bdb249fce9ad4 ("ARM: integ… |
CVE-2026-64164 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()
The trace even… |
CVE-2026-64134 | High | 7.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm: Don't setup bogus iov_iter for silencing
At transition to the iov_iter for PCM… |
CVE-2026-64128 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: ISO: drop ISO_END frames received without prior ISO_START
ISO data PDUs carry… |
CVE-2026-64120 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
net: ethtool: fix NULL pointer dereference in phy_reply_size
In phy_prepare_data(), sever… |
CVE-2026-64116 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
ipv6: ioam: add NULL check for idev in ipv6_hop_ioam()
Reported by Sashiko:
The function… |
CVE-2026-64107 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put()
In the pcm… |
CVE-2026-64094 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface
Without rtnl_lock h… |
CVE-2026-53403 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var
info->var, a… |
CVE-2026-53399 | Critical | 9.8 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
nfsd: release layout stid on setlease failure
nfs4_alloc_stid() publishes the new stid in… |
CVE-2026-53392 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
NFSv4/flexfiles: reject zero filehandle version count
ff_layout_alloc_lseg() decodes the… |
CVE-2026-53391 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr
nfs4_decode_mp_ds_addr()… |
CVE-2026-53385 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write
A KASAN null-… |
CVE-2026-53383 | High | 7.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: reject non-VALID session in compound request branch
smb2_check_user_session() take… |
CVE-2026-53382 | Medium | 5.5 | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved:
media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
syzbot reported a general… |
CVE-2026-62309 | High | 7.5 | 2026-07-16 | CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled becau… |
CVE-2026-62299 | Medium | 5.3 | 2026-07-16 | CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two response… |
CVE-2026-15352 | High | 7.5 | 2026-07-16 | A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fa… |
CVE-2026-52865 | Medium | 6.5 | 2026-07-15 | When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or… |
CVE-2025-56363 | High | 7.5 | 2026-07-14 | A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple… |
CVE-2026-56168 | Medium | 6.5 | 2026-07-14 | Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network. |
CVE-2026-50673 | High | 7.8 | 2026-07-14 | Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
CVE-2026-50366 | Medium | 6.5 | 2026-07-14 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-50315 | High | 7.8 | 2026-07-14 | Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
CVE-2026-57976 | Medium | 6.5 | 2026-07-14 | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
CVE-2026-10670 | Medium | 5.5 | 2026-07-14 | The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on th… |
CVE-2026-15690 | Low | 3.1 | 2026-07-14 | A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_co… |