CVE Database

CVE-2026-101939 High · 7.5 CWE-476 Oct 14, 2026

Junos OS and Junos OS Evolved: A routing-policy table reference causes routing-daemon denial of service when source-based forwarding is used

A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with `then source-based-forwarding next-hop next-table <X>` is configured to reference a routing table that does not exist.

CVE-2026-110659 Medium · 5.5 CWE-476 Oct 14, 2026

ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry

ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_link index. Attackers can supply a crafted ELF file whose SHT_REL or SHT_RELA section has a dangling sh_link, causing find_hash_section() to dereference null and deny service.

CVE-2026-110600 Medium · 5.5 CWE-476 Oct 14, 2026

xlsxio through 0.2.37 NULL Pointer Dereference via Worksheet Relationship Without Id

xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in main_sheet_get_sheetfile_expat_callback_element_start() in lib/xlsxio_read.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet Relationship lacking an Id attribute, crashing the process when xlsxioread_sheet_open() is called.

CVE-2026-77206 High · 7.5 CWE-476 Oct 13, 2026

IKEv2 pre-authentication Null Pointer Dereference in EAP code

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of inconsistency within the IKEv2 state machine code, this bug can be triggered by any IKEv2 connection, even if EAP is not configured at all. The error is caused by a fall-through where it incorrectly dereferences ike->sa.st_eap which is NULL. A malicious IKE_AUTH packet can trigger this bug, meaning the peer does not need to be authenticated. The bug results in a crash and restart of the pluto daemon. No remote code execution is possible. Continued exploitation can cause a denial of service.

CVE-2026-95640 Medium · 5.5 CWE-476 Oct 13, 2026

Photoshop Desktop | NULL Pointer Dereference (CWE-476)

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-105896 Medium · 5.5 CWE-476 Oct 13, 2026

Photoshop Desktop | NULL Pointer Dereference (CWE-476)

Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103829 Medium · 5.5 CWE-476 Oct 13, 2026

Substance3D - Designer | NULL Pointer Dereference (CWE-476)

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103828 Medium · 5.5 CWE-476 Oct 13, 2026

Substance3D - Designer | NULL Pointer Dereference (CWE-476)

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103826 Medium · 5.5 CWE-476 Oct 13, 2026

Substance3D - Designer | NULL Pointer Dereference (CWE-476)

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103824 Medium · 5.5 CWE-476 Oct 13, 2026

Substance3D - Designer | NULL Pointer Dereference (CWE-476)

Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103855 Medium · 5.5 CWE-476 Oct 13, 2026

Dimension | NULL Pointer Dereference (CWE-476)

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-103852 Medium · 5.5 CWE-476 Oct 13, 2026

Substance3D - Stager | NULL Pointer Dereference (CWE-476)

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVE-2026-96953 High · 7.8 CWE-476 Oct 13, 2026

Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.

CVE-2026-88079 High · 7.0 CWE-476 Oct 13, 2026

Windows MIDI Service Module Elevation of Privileges Vulnerability

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-88076 High · 7.0 CWE-476 Oct 13, 2026

Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85859 Medium · 6.5 CWE-476 Oct 13, 2026

Windows Message Queuing Queue Manager Denial of Service Vulnerability

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

CVE-2026-84017 High · 7.5 CWE-476 Oct 13, 2026

Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-83665 High · 7.5 CWE-476 Oct 13, 2026

Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83648 Medium · 6.5 CWE-476 Oct 13, 2026

Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-83636 Medium · 6.5 CWE-476 Oct 13, 2026

Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-83571 Medium · 5.5 CWE-476 Oct 13, 2026

Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-70566 High · 7.8 CWE-476 Oct 13, 2026

Windows Schannel Elevation of Privilege Vulnerability

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70248 Medium · 6.5 CWE-476 Oct 13, 2026

Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-69978 Medium · 5.6 CWE-476 Oct 13, 2026

Microsoft Windows VMSwitch Denial of Service Vulnerability

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-69795 High · 7.0 CWE-476 Oct 13, 2026

Windows Clipboard Server Elevation of Privilege Vulnerability

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.