| CVE-2026-62309 |
2026-07-16 |
CoreDNS is a DNS server written in Go. Prior to 1.14.4, a single 28-byte UDP datagram can crash the CoreDNS process when the proxyproto plugin is enabled because plugin/pkg/proxyproto/proxyproto.go Pa… |
| CVE-2026-62299 |
2026-07-16 |
CoreDNS is a DNS server written in Go. Prior to 1.14.5, the CoreDNS rewrite plugin supports edns0 rewrite rules with an optional revert flag, and two response rules, edns0SetResponseRule and edns0Repl… |
| CVE-2026-15352 |
2026-07-16 |
A vulnerability exists in the Health & Safety (HS) application of NASA's Core Flight System (cFS). The flaw allows the application to crash via segmentation fault when processing a routine Housekeepin… |
| CVE-2026-52865 |
2026-07-15 |
When NGINX Ingress Controller processes Ingress or TransportServer resources, an authenticated, remote attacker with permission to create or modify Ingress or TransportServer resources can cause the N… |
| CVE-2025-56363 |
2026-07-14 |
A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, Account Login, Target… |
| CVE-2026-56168 |
2026-07-14 |
Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network. |
| CVE-2026-50673 |
2026-07-14 |
Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally. |
| CVE-2026-50366 |
2026-07-14 |
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-50315 |
2026-07-14 |
Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. |
| CVE-2026-57976 |
2026-07-14 |
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. |
| CVE-2026-10670 |
2026-07-14 |
The CONFIG_USERSPACE verification handler for the k_thread_name_copy() system call (z_vrfy_k_thread_name_copy() in kernel/thread.c) calls k_object_find() on the caller-supplied thread pointer and then… |
| CVE-2026-15690 |
2026-07-14 |
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the component Shared Client Li… |
| CVE-2026-58101 |
2026-07-13 |
Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.
X509V3_EXT_d2i(ext) returns NULL when an extension's DER value fails to parse. basicC, ia5str… |
| CVE-2026-55783 |
2026-07-10 |
NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1749.0, NanaZip's seven in-house IInArchive handlers in NanaZip.Codecs unconditionally dereference the caller-s… |
| CVE-2026-21901 |
2026-07-09 |
A NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SS… |
| CVE-2026-60109 |
2026-07-09 |
Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRB_ERROR me… |
| CVE-2026-15184 |
2026-07-09 |
A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a manipulation of the a… |
| CVE-2026-56288 |
2026-07-09 |
GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hun… |
| CVE-2026-15171 |
2026-07-08 |
SSH protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service |
| CVE-2026-58250 |
2026-07-08 |
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with c… |