CWE-476

5,266 vulnerabilities with CWE-476

CVE-2026-32849 MEDIUM

NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c

CVSS 5.5

CVE-2026-8783 MEDIUM

omec-project amf dispatcher.go UERadioCapabilityCheckResponse null pointer dereference

CVSS 4.3

CVE-2026-8782 MEDIUM

omec-project amf NGAP Message handler.go null pointer dereference

CVSS 4.3

CVE-2026-8781 MEDIUM

omec-project amf handler.go RANConfiguration null pointer dereference

CVSS 4.3

CVE-2026-8723 MEDIUM

qs.stringify crashes on null/undefined entries in comma-format arrays under encodeValuesOnly

CVSS 5.3

CVE-2026-44638 LOW

libsixel: NULL pointer dereference

CVSS 2.5

CVE-2026-42409 HIGH

F5 BIG-IP HTTP/2 iRule - TMM Denial of Service

CVSS 7.5

CVE-2026-42442 LOW

NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink

CVSS 3.3

CVE-2026-40414 HIGH

Microsoft Windows TCP/IP - Adjacent-Network Null Pointer Denial of Service

CVSS 7.4

CVE-2026-40413 HIGH

Microsoft Windows TCP/IP - Adjacent-Network Null Pointer Denial of Service

CVSS 7.4

CVE-2026-40405 HIGH

Microsoft Windows TCP/IP - Null Pointer Denial of Service

CVSS 7.5

CVE-2026-40401 HIGH

Microsoft Windows TCP/IP - Local Null Pointer Denial of Service

CVSS 7.1

CVE-2026-34662 MEDIUM

Illustrator | NULL Pointer Dereference (CWE-476)

CVSS 5.5

CVE-2026-34350 MEDIUM

Microsoft Windows Server 2025 - Windows Storport Miniport Driver Denial of Service Vulnerability

CVSS 6.5

CVE-2026-34339 MEDIUM

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

CVSS 5.5

CVE-2026-20914 MEDIUM

Intel(R) QAT software drivers for Windows < 2.6.0 - Denial of Service via Null Pointer Dereference

CVSS 5.5

CVE-2026-20771 MEDIUM

Intel(R) QAT software drivers for Windows < 1.13 - Denial of Service via Null Pointer Dereference

CVSS 6.1

CVE-2026-28985 MEDIUM

iOS and iPadOS < 26.5 - Denial of Service via Null Pointer Dereference

CVSS 6.2

CVE-2026-8252 MEDIUM

Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference

CVSS 4.3

CVE-2026-7262 HIGH

NULL pointer dereference in SOAP apache:Map decoder with missing <value>

CVSS 7.5

CVE-2026-7259 MEDIUM

Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()

CVSS 6.5

CVE-2026-42183 MEDIUM

Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)

CVSS 6.5

CVE-2026-6666 MEDIUM

PgBouncer crash in kill_pool_logins_server_error

CVSS 5.9

CVE-2026-43473 MEDIUM

scsi: mpi3mr: Add NULL checks when resetting request and reply queues

CVSS 5.5

CVE-2026-43471 MEDIUM

scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace()

CVSS 5.5