#cwe-476

共收录 587 条相关情报。

← 返回所有主题
漏洞预警2026-10-19 发布INFO

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage for a zero-size image. ImagingExpand() allocates a non-emp...

CVE-2026-112392

Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image storage f

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-19 发布INFO

The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub_probe() (subsys/mgmt/updatehub/updatehub.c). The decoder...

CVE-2026-76787

The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl_updatehub

历史摘要 · 未重新核验 · NVD

安全公告2026-10-16 发布INFO

kin-openapi openapi3filter: nil-pointer panic in ValidateResponse on a response header declared with content

CVE-2026-100349

## Summary `ValidateResponse` panics on a nil pointer when a spec declares a response header with `content` instead of

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-16 发布INFO

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket...

CVE-2026-111373

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicio

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

kin-openapi: Incomplete Fix for GHSA-p6wj-qrr4-pgh5: Three Unpatched nil-Items Panic Paths in openapi3filter

CVE-2026-100353

## Summary The fix for GHSA-p6wj-qrr4-pgh5 addressed a nil-pointer dereference that occurs when an OpenAPI 3.1 array sc

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

kin-openapi spec loader panics on a self-referential additionalProperties $ref (nil-pointer DoS)

CVE-2026-100348

The defect ---------- Confirmed at HEAD (f0407d5, v0.144.0). openapi3/loader.go, inside resolveComponent's drill closure

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-15 发布HIGH

kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths that were missed by the fix for GHSA-p6wj-qrr4-pgh5 lack a...

CVE-2026-100353

kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decoder paths t

来源摘录 · NVD

安全公告2026-10-15 发布INFO

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows...

CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-15 发布INFO

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd...

CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-14 发布MEDIUM

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesenti...

CVE-2026-100394

Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11,

来源摘录 · NVD

安全公告2026-10-14 发布INFO

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for...

CVE-2026-77206

Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a res

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-13 发布MEDIUM

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

CVE-2026-85859

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a n

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

CVE-2026-83665

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-83648

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a networ

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-83636

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-83571

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布HIGH

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

CVE-2026-70566

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布MEDIUM

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

CVE-2026-70248

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.

来源摘录 · NVD

漏洞预警2026-10-13 发布INFO

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to c...

CVE-2026-104343

Adobe Framemaker is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-13 发布INFO

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop runnin...

CVE-2026-104004

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In som

历史摘要 · 未重新核验 · NVD