Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-102018
Média · 6.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: Malformed PIM Bidir DF-Election messages cause routing service disruption when bidirectional PIM is enabled
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message.
CVE-2026-102013
Média · 4.4
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message.
CVE-2026-101988
Média · 6.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabled
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial of service via LDP messages received over an operational LDP session.
CVE-2026-101977
Alta · 7.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: A specific BGP packet causes an rpd crash when ephemeral configuration is used
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used.
CVE-2026-101973
Alta · 7.5
CWE-476 14/10/2026
Junos OS: Malformed packet causes pkid denial of service when certificate re-enrollment is used
A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthenticated remote attacker to cause a denial of service via a malformed packet received during CMP enrollment or automatic certificate re-enrollment.
CVE-2026-101948
Alta · 7.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: A specific BGP FlowSpec update causes an rpd crash when BGP FlowSpec import policy is used
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a remote unauthenticated BGP peer to cause a denial of service via a specific BGP FlowSpec update received by an affected BGP session.
CVE-2026-101941
Alta · 7.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when routing-policy resolution-map processing and policy event tracing are enabled
A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is enabled.
CVE-2026-101940
Alta · 7.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP ISO-VPN egress protection is enabled
A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated configured BGP peer to cause a denial of service via a BGP UPDATE when ISO-VPN and egress-protection configuration is enabled.
CVE-2026-101939
Alta · 7.5
CWE-476 14/10/2026
Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used
A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table <X>` is configured to reference a routing table that does not exist.
CVE-2026-110659
Média · 5.5
CWE-476 14/10/2026
ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry
ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_link index. Attackers can supply a crafted ELF file whose SHT_REL or SHT_RELA section has a dangling sh_link, causing find_hash_section() to dereference null and deny service.
CVE-2026-110600
Média · 5.5
CWE-476 14/10/2026
xlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Id
xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet Relationship lacking an Id attribute, crashing the process when xlsxioread_sheet_open() is called.
CVE-2026-77206
Alta · 7.5
CWE-476 13/10/2026
IKEv2 pre-authentication Null Pointer Dereference in EAP code
Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.
CVE-2026-95640
Média · 5.5
CWE-476 13/10/2026
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-105896
Média · 5.5
CWE-476 13/10/2026
Photoshop Desktop | NULL Pointer Dereference (CWE-476)
Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103829
Média · 5.5
CWE-476 13/10/2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103828
Média · 5.5
CWE-476 13/10/2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103826
Média · 5.5
CWE-476 13/10/2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103824
Média · 5.5
CWE-476 13/10/2026
Substance3D - Designer | NULL Pointer Dereference (CWE-476)
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103855
Média · 5.5
CWE-476 13/10/2026
Dimension | NULL Pointer Dereference (CWE-476)
Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-103852
Média · 5.5
CWE-476 13/10/2026
Substance3D - Stager | NULL Pointer Dereference (CWE-476)
Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-96953
Alta · 7.8
CWE-476 13/10/2026
Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability
Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
CVE-2026-88079
Alta · 7.0
CWE-476 13/10/2026
Windows MIDI Service Module Elevation of Privileges Vulnerability
Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-88076
Alta · 7.0
CWE-476 13/10/2026
Windows Installer Elevation of Privilege Vulnerability
Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-85859
Média · 6.5
CWE-476 13/10/2026
Windows Message Queuing Queue Manager Denial of Service Vulnerability
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.
CVE-2026-84017
Alta · 7.5
CWE-476 13/10/2026
Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability
Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.