CWE-476
CVEs classified under CWE-476, newest first.
1042 CVEsRSS
CVE-2026-98416Medium· 4.1In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() If devm_kcalloc() for rx_chn->flows fails in a channel request function, the error p…
In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn() If devm_kcalloc() for rx_chn->flows fails in a channel request function, the error p…
CVE-2026-98412Medium· 4.1In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() If memory allocation fails in pwrseq_unit_setup_deps(), pwrseq_unit_put() is called to release the…
In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new() If memory allocation fails in pwrseq_unit_setup_deps(), pwrseq_unit_put() is called to release the…
CVE-2026-98411Medium· 4.1In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() If dev_set_name() fails in pwrseq_device_register(), we jump to the err_put_pwrseq label be…
In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register() If dev_set_name() fails in pwrseq_device_register(), we jump to the err_put_pwrseq label be…
CVE-2026-98404Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains that returning a NULL here will lead to a NULL pointer dereference in …
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create() Smatch complains that returning a NULL here will lead to a NULL pointer dereference in …
CVE-2026-98400Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QEMU direct kernel boot, might not provide an IPL parameter block
In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QEMU direct kernel boot, might not provide an IPL parameter block. In …
CVE-2026-98399Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through os_info, the stand-alone dump passes it …
In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block Unlike kdump, which passes the re-IPL parameter block through os_info, the stand-alone dump passes it …
CVE-2026-77207High· 7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication
Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. When libreswan decodes an IKE CERT payload of type CERT_PKCS7_WRAPPED_X509, it guards the PKCS#7 blob with SEC_PKCS7ContainsCert…
CVE-2026-77206High· 7.5Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication
Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if …
CVE-2026-95640Medium· 5.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condit…
CVE-2026-105896Medium· 5.5Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condit…
CVE-2026-103829Medium· 5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service c…
CVE-2026-103828Medium· 5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service c…
CVE-2026-103826Medium· 5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service c…
CVE-2026-103824Medium· 5.5Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service c…
CVE-2026-103855Medium· 5.5Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exp…
CVE-2026-103852Medium· 5.5Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service con…
CVE-2026-97767High· 8.8Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-96953High· 7.8Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
CVE-2026-88079High· 7.0Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-88076High· 7.0Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85859Medium· 6.5Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
CVE-2026-84017High· 7.5Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
CVE-2026-83665High· 7.5Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
CVE-2026-83648Medium· 6.5Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.
CVE-2026-83636Medium· 6.5Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
CVE-2026-83571Medium· 5.5Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
CVE-2026-70566High· 7.8Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-70248Medium· 6.5Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
CVE-2026-69978Medium· 5.6Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.
CVE-2026-69795High· 7.0Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.