Browse CVEs

MEDIUM 5.5 CVE-2026-27214 Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-s… Substance 3d Painter 11.1.3+ Fix from $1,6002026-03-10 MEDIUM 5.5 CVE-2026-27215 Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-s… Substance 3d Painter 11.1.3+ Fix from $1,6002026-03-10 MEDIUM 5.5 CVE-2026-21364 Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-s… Substance 3d Painter 11.1.3+ Fix from $1,6002026-03-10 MEDIUM 5.5 CVE-2026-21363 Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-s… Substance 3d Painter 11.1.3+ Fix from $1,6002026-03-10 HIGH 7.8 CVE-2026-31792 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a null pointer dereference in… Iccdev 2.3.1.5+ Fix from $1,9502026-03-10 MEDIUM 5.5 CVE-2026-30986 iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to 2.3.1.5, there is a heap-based buffer overflow … Iccdev 2.3.1.5+ Fix from $1,6002026-03-10 MEDIUM 5.5 CVE-2026-25168 Null pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to deny service locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,6002026-03-10 HIGH 7.8 CVE-2026-25165 Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally. Windows 10 1607 10.0.14393.8957 / 10.0.17763.8511+ Fix from $1,9502026-03-10 MEDIUM 6.5 CVE-2026-24641 A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4… Fortiweb 7.6.7 / 8.0.3+ Fix from $1,6002026-03-10 HIGH 7.8 CVE-2026-24293 Null pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Windows 10 21h2 10.0.19044.7058 / 10.0.19045.7058+ Fix from $1,9502026-03-10 HIGH 7.5 CVE-2025-14769 In some cases, the `tcp-setmss` handler may free the packet data and throw an error without halting the rule processing engine. A subsequent rule ca… FreeBSD Mitigation only Fix from $1,9502026-03-09 MEDIUM 5.5 CVE-2026-3665 A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsx_consumer::read_office_docu… Xlnt after 1.6.1 Fix from $1,6002026-03-07 MEDIUM 6.5 CVE-2026-29781 Sliver is a command and control framework that uses a custom Wireguard netstack. In versions from 1.7.3 and prior, a vulnerability exists in the Sliv… Sliver after 1.7.3 Fix from $1,6002026-03-07 HIGH 7.5 CVE-2025-69649 GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. D… Binutils after 2.46 Fix from $1,9502026-03-06 MEDIUM 5.5 CVE-2025-69651 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed rel… Binutils after 2.46 Fix from $1,6002026-03-06 MEDIUM 6.5 CVE-2026-20064 A vulnerability in of Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, local attacker to cause the device to unexpec… Secure Firewall Threat Defense Mitigation only Fix from $1,6002026-03-04 MEDIUM 5.5 CVE-2026-23237 In the Linux kernel, the following vulnerability has been resolved: platform/x86: classmate-laptop: Add missing NULL pointer checks In a few places… Linux Kernel 5.10.251 / 5.15.201+ Fix from $1,6002026-03-04 HIGH 7.5 CVE-2025-62817 An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of session->ncp_h… Exynos 1280 Firmware Mitigation only Fix from $1,9502026-03-03 HIGH 7.5 CVE-2025-62814 An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, and 2400. A NULL pointer dereference of ft_handle in load_fw_utc_v… Exynos 1280 Firmware Mitigation only Fix from $1,9502026-03-03 MEDIUM 5.5 CVE-2025-62815 An issue was discovered in Samsung Mobile Processor Exynos 1380, 1480, 2400, 1580, and 2500. A NULL pointer dereference of npu_proto_drv.ast.thread_r… Exynos 1380 Firmware Mitigation only Fix from $1,6002026-03-03 MEDIUM 6.5 CVE-2026-3408 A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the compo… Open Babel after 3.1.1 Fix from $1,6002026-03-02 MEDIUM 5.5 CVE-2026-3392 A weakness has been identified in FascinatedBox lily up to 2.3. The affected element is the function eval_tree of the file src/lily_emitter.c. This m… Lily after 2.3 Fix from $1,6002026-03-01 MEDIUM 5.5 CVE-2026-3389 A vulnerability was determined in Squirrel up to 3.2. This vulnerability affects the function sqstd_rex_newnode in the library sqstdlib/sqstdrex.cpp.… Squirrel after 3.2 Fix from $1,6002026-03-01 MEDIUM 5.5 CVE-2026-3387 A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren… Wren after 0.4.0 Fix from $1,6002026-03-01 HIGH 7.5 CVE-2026-27141 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic Mitigation only Fix from $1,9502026-02-26 MEDIUM 6.1 CVE-2026-22722 A malicious actor with authenticated user privileges on a Windows based Workstation host may be able to cause a null pointer dereference error. To Re… No fix yet Fix from $1,6002026-02-26 HIGH 7.5 CVE-2026-3202 NTS-KE protocol dissector crash in Wireshark 4.6.0 to 4.6.3 allows denial of service Wireshark 4.6.4+ Fix from $1,9502026-02-25 MEDIUM 5.5 CVE-2026-3146 A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libvips/fore… Libvips after 8.18.0 Fix from $1,6002026-02-25 MEDIUM 5.3 CVE-2026-26983 ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, the MSL inte… Imagemagick 6.9.13-40 / 7.1.2-15+ Fix from $1,6002026-02-24 HIGH 7.5 CVE-2026-26024 free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to … Smf after 1.4.1 Fix from $1,9502026-02-24