#cwe-476
共收录 587 条相关情报。
← 返回所有主题 漏洞预警2026-10-19 发布INFO
CVE-2026-112392
Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage f
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-19 发布INFO
CVE-2026-76787
The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub
历史摘要 · 未重新核验 · NVD
安全公告2026-10-16 发布INFO
CVE-2026-100349
## Summary
`ValidateResponse` panics on a nil pointer when a spec declares a response header with `content` instead of
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-16 发布INFO
CVE-2026-111373
FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicio
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-15 发布INFO
CVE-2026-100353
## Summary
The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array sc
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-15 发布INFO
CVE-2026-100348
The defect
----------
Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-15 发布HIGH
CVE-2026-100353
kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths t
来源摘录 · NVD
安全公告2026-10-15 发布INFO
CVE-2026-110834
FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-15 发布INFO
CVE-2026-110829
FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-14 发布MEDIUM
CVE-2026-100394
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11,
来源摘录 · NVD
安全公告2026-10-14 发布INFO
CVE-2026-77206
Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a res
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-85859
Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a n
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-83665
Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-83648
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a networ
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-83636
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-83571
Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布HIGH
CVE-2026-70566
Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布MEDIUM
CVE-2026-70248
Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.
来源摘录 · NVD
漏洞预警2026-10-13 发布INFO
CVE-2026-104343
Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-13 发布INFO
CVE-2026-104004
MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In som
历史摘要 · 未重新核验 · NVD