CWE-476— NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.— MITRE CWE catalog
5,799 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-476page 36 of 116
- CVE-2025-53408MEDIUMCVSS 6.5EG 6.52025-11-07
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-52865MEDIUMCVSS 6.5EG 6.52025-11-07
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-47207MEDIUMCVSS 6.5EG 6.52025-11-07
A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already …
- CVE-2025-61908MEDIUMCVSS 6.5EG 6.52025-10-16
Icinga 2 is an open source monitoring system. From 2.10.0 to before 2.15.1, 2.14.7, and 2.13.13, when creating an invalid reference, such as a reference to null, dereferencing results in a segmentation fault. This can be used by any API us…
- CVE-2025-11550MEDIUMCVSS 6.5EG 6.52025-10-09
A vulnerability was found in Tenda W12 3.0.0.6(3948). The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in nul…
- CVE-2025-59967MEDIUMCVSS 6.5EG 6.52025-10-09
A NULL Pointer Dereference vulnerability in the PFE management daemon (evo-pfemand) of Juniper Networks Junos OS Evolved on ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509 devices allows an unauthenticated, adjacent atta…
- CVE-2025-47210MEDIUMCVSS 6.5EG 6.52025-10-03
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-44011MEDIUMCVSS 6.5EG 6.52025-10-03
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-44010MEDIUMCVSS 6.5EG 6.52025-10-03
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-44009MEDIUMCVSS 6.5EG 6.52025-10-03
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-44008MEDIUMCVSS 6.5EG 6.52025-10-03
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-58364MEDIUMCVSS 6.5EG 6.52025-09-11
OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.12 and earlier, an unsafe deserialization and validation of printer attributes causes null dereference in the libcups libr…
- CVE-2025-30275MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-30274MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the…
- CVE-2025-30272MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the…
- CVE-2025-30268MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We…
- CVE-2025-30267MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We…
- CVE-2025-30263MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-30262MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the v…
- CVE-2025-29889MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29888MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29886MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29882MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We…
- CVE-2025-29879MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29878MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29875MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29874MEDIUMCVSS 6.5EG 6.52025-08-29
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-29901MEDIUMCVSS 6.5EG 6.52025-08-26
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the …
- CVE-2025-53716MEDIUMCVSS 6.5EG 6.52025-08-12
Null pointer dereference in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.
- CVE-2025-24515MEDIUMCVSS 6.5EG 6.52025-08-12
NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
- CVE-2025-50952MEDIUMCVSS 6.5EG 6.52025-08-07
openjpeg v 2.5.0 was discovered to contain a NULL pointer dereference via the component /openjp2/dwt.c.
- CVE-2025-49832MEDIUMCVSS 6.5EG 6.52025-08-01
Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition i…
- CVE-2025-8033MEDIUMCVSS 6.5EG 6.52025-07-22
The JavaScript engine did not handle closed generators correctly and it was possible to resume them leading to a nullptr deref. This vulnerability was fixed in Firefox 141, Firefox ESR 115.26, Firefox ESR 128.13, Firefox ESR 140.1, Thunder…
- CVE-2025-6395MEDIUMCVSS 6.5EG 6.52025-07-10
A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().
- CVE-2025-53184MEDIUMCVSS 6.5EG 6.52025-07-07
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
- CVE-2025-53183MEDIUMCVSS 6.5EG 6.52025-07-07
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
- CVE-2025-53182MEDIUMCVSS 6.5EG 6.52025-07-07
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
- CVE-2025-53181MEDIUMCVSS 6.5EG 6.52025-07-07
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
- CVE-2025-53180MEDIUMCVSS 6.5EG 6.52025-07-07
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
- CVE-2025-53179MEDIUMCVSS 6.5EG 6.52025-07-07
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
- CVE-2025-33057MEDIUMCVSS 6.5EG 6.52025-06-10
Null pointer dereference in Windows Local Security Authority (LSA) allows an authorized attacker to deny service over a network.
- CVE-2025-30668MEDIUMCVSS 6.5EG 6.52025-05-14
Integer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct a denial of service via network access.
- CVE-2025-30667MEDIUMCVSS 6.5EG 6.52025-05-14
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
- CVE-2025-30666MEDIUMCVSS 6.5EG 6.52025-05-14
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
- CVE-2025-30665MEDIUMCVSS 6.5EG 6.52025-05-14
NULL pointer dereference in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a denial of service via network access.
- CVE-2025-20071MEDIUMCVSS 6.5EG 6.52025-05-13
NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
- CVE-2025-29835MEDIUMCVSS 6.5EG 6.52025-05-13
Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.
- CVE-2025-24251MEDIUMCVSS 6.5EG 6.52025-04-29
The issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, visionOS 2.4, watchOS 11.4. An attacker on the local ne…
- CVE-2025-32912MEDIUMCVSS 6.5EG 6.52025-04-14
A flaw was found in libsoup, where SoupAuthDigest is vulnerable to a NULL pointer dereference. The HTTP server may cause the libsoup client to crash.
- CVE-2025-32910MEDIUMCVSS 6.5EG 6.52025-04-14
A flaw was found in libsoup, where soup_auth_digest_authenticate() is vulnerable to a NULL pointer dereference. This issue may cause the libsoup client to crash.
Map vulnerabilities like CWE-476 to your infrastructure
EchelonGraph correlates every CVE — across CWE-476 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →