CWE-476 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-476 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-21525Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker…4.9%보통6.2CVE-2026-83665Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over…1.2%높음7.5CVE-2026-69881Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service ov…1.2%높음7.5CVE-2026-69587Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service ov…1.2%높음7.5CVE-2026-84017Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized …1.1%높음7.5CVE-2026-69744Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a …1.1%높음7.5CVE-2026-72949Null pointer dereference in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unaut…1.1%높음7.5CVE-2026-72939Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized at…1.1%보통6.5
전체 목록
120건
CVE-2026-83648Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service ove…1.1%보통6.5
CVE-2026-18453A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of op_sha…0.8%높음7.5
CVE-2026-73547Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.…0.8%높음7.5
CVE-2026-85859Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny servic…0.8%보통6.5
CVE-2026-70575Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network.0.8%보통5.3
CVE-2026-66303Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.0.8%보통6.5
CVE-2026-62762Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service ove…0.8%보통6.5
CVE-2026-48521Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.…0.7%보통5.9
CVE-2026-53719Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based applicati…0.7%보통6.5
CVE-2026-100895A security flaw has been discovered in Trusted Domain Project OpenARC up to 1.0.0.Beta1. Impacted is the funct…0.7%보통5.5
CVE-2026-92417A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement …0.6%높음7.1
CVE-2026-57195Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, …0.6%높음7.5
CVE-2026-20221Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel deca…0.6%보통5.8
CVE-2026-97767Double free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.0.6%높음8.8
CVE-2026-77901Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a netwo…0.6%높음8.8
CVE-2026-93312A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file…0.6%낮음2.1
CVE-2026-109967yt-dlp-web-ui through 4.0.0 contains a NULL pointer dereference vulnerability in the Service.Formats JSON-RPC …0.6%높음8.7
CVE-2026-102028A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…0.5%높음8.7
CVE-2026-110491The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certai…0.5%보통6.9
CVE-2026-109107A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of t…0.5%보통5.5
CVE-2026-62298mouse07410/asn1c is an ASN.1 compiler. Prior to 1.2.5, `OPEN TYPE` decoding can dereference an unallocated mem…0.5%미평가0.0
CVE-2026-77206Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication…0.5%높음7.5
CVE-2026-95122mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp.…0.5%높음7.5
CVE-2026-107708MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's get_pac_princ_with_real…0.5%보통6.9
CVE-2026-119760sniproxy through 0.7.0 contains a NULL pointer dereference vulnerability in resolv_cancel() that allows remote…0.5%높음8.7
CVE-2026-85150A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while …0.5%높음7.5
CVE-2026-77692An attacker can cause `named` to abort by sending a crafted DNS-over-HTTPS request with a cryptographically in…0.5%높음7.5
CVE-2026-96888A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with …0.5%높음7.5
CVE-2026-63686A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on al…0.5%높음7.5
CVE-2026-65412A null pointer dereference was addressed with improved input validation. This issue is fixed in iOS 26.7 and i…0.5%보통6.5
CVE-2026-102029A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…0.5%높음8.7
CVE-2026-101977A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…0.5%높음8.7
CVE-2026-101941A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…0.5%높음8.7
CVE-2026-101940A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS E…0.5%높음8.7
CVE-2026-101939A NULL Pointer Dereference vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and…0.5%높음8.7
CVE-2026-101948A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…0.5%높음8.7
CVE-2026-46729NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This iss…0.5%높음7.5
CVE-2026-101949A NULL Pointer Dereference vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and…0.4%높음8.7
CVE-2026-92413A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulner…0.4%낮음2.1
CVE-2026-97394kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.143.0, openapi3filter accepts Ope…0.4%높음7.5
CVE-2026-62966ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP2350. …0.4%높음7.5
CVE-2026-117610libexpat through 2.9.0 contains a NULL pointer dereference vulnerability in externalEntityInitProcessor2() in …0.4%높음8.2
CVE-2026-48741libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.4%높음7.5
CVE-2026-55209resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9,…0.4%심각9.8
CVE-2026-119188Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.4%높음7.5
CVE-2026-100394Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 unt…0.4%보통6.5
CVE-2026-101302TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed …0.4%보통6.5
CVE-2026-107778MIT Kerberos 5 (krb5) through 1.22.2 contains a NULL pointer dereference in make_cred_list() in rd_cred.c that…0.4%높음7.1
CVE-2026-66859NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift c_glib bindings. This i…0.4%높음8.7
CVE-2026-87117NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before…0.4%높음8.7
CVE-2026-78126strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka plugin.0.4%보통5.9
CVE-2026-69384Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny se…0.4%높음7.1
CVE-2026-86134A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote,…0.4%높음8.7
CVE-2026-83571Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locall…0.4%보통5.5
CVE-2026-57486pupnp is an SDK for development of UPnP device and control point applications. Prior to 2.0.2, ixmlNode_compar…0.4%높음7.5
CVE-2026-111736P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read requ…0.4%높음8.7
CVE-2026-111733P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid targe…0.4%높음8.7
CVE-2026-90792A flaw has been found in GPAC up to f1219cde. This issue affects the function gf_node_list_get_child of the fi…0.4%낮음2.1
CVE-2026-83636Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.0.4%보통6.5
CVE-2026-70248Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally.0.4%보통6.5
CVE-2026-19888Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25…0.4%높음7.5
CVE-2026-92626Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/d…0.4%높음7.5
CVE-2026-76868Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in route_policy_add.cgi c…0.4%보통6.9
CVE-2026-76865Netcore NR255-V version 1.5.130703 contains a null pointer dereference vulnerability in the QoS setter CGI han…0.4%보통6.9
CVE-2026-101961A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos …0.4%높음8.7
CVE-2026-100348kin-openapi is a Go project for handling OpenAPI files. Prior to 0.145.0, openapi3.Loader can dereference a ni…0.4%보통5.3
CVE-2026-100349kin-openapi is a Go project for handling OpenAPI files. Prior to 0.146.0, openapi3filter.ValidateResponse pass…0.4%높음8.2
CVE-2026-76492As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s…0.4%높음7.5
CVE-2026-111107A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote, una…0.4%높음8.7
CVE-2026-102086A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows a…0.4%높음8.2
CVE-2026-100890A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the f…0.4%보통5.5
CVE-2026-112381Apache Traffic Server can crash with a null pointer dereference when a client POST request is torn down via ha…0.4%높음8.2
CVE-2026-17539RTU500 has a vulnerability, where high-load scenarios, such as sending GI requests at short intervals, may cau…0.4%보통5.9
CVE-2026-91954FreeRDP before 3.31.0 contains a null pointer dereference vulnerability in gdi_surface_bits when processing Su…0.3%높음7.1
CVE-2026-16702IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Ser…0.3%보통6.5
CVE-2026-101973A NULL Pointer Dereference vulnerability in the pkid component of Juniper Networks Junos OS allows an unauthen…0.4%높음8.7
CVE-2026-17273IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a…0.3%보통6.5
CVE-2026-45747Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.3%높음7.5
CVE-2026-109272ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the PostScript decoder that is tri…0.4%보통6.3
CVE-2026-86128A NULL pointer dereference vulnerability in Fireware OS's NetFlow packet-processing feature allows a remote, u…0.4%높음8.2
CVE-2026-15891The MQTT-SN client keepalive handler process_ping() in subsys/net/lib/mqtt_sn/mqtt_sn.c removes the gateway re…0.3%높음7.5
CVE-2026-117548A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN (rename) operation …0.3%보통6.5
CVE-2026-105661Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organizatio…0.3%보통5.3
CVE-2026-119842A flaw was found in GStreamer's gst-plugins-base MicroDVD subtitle parser. When processing a specially crafted…0.3%보통6.5
CVE-2026-96432A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, p…0.3%낮음2.1
CVE-2026-70566Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.0.3%높음7.8
CVE-2026-116740libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows r…0.3%높음7.1
CVE-2026-77207Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication. W…0.3%높음7.5
CVE-2026-100353kin-openapi is a Go project for handling OpenAPI files. From 0.136.0 until 0.149.0, three openapi3filter decod…0.3%높음7.5
CVE-2026-88373libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path. When de265_…0.3%높음7.5
CVE-2026-90782S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_mes…0.3%보통6.0
CVE-2026-77489Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges loca…0.3%높음7.8
CVE-2026-78130strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parse…0.3%높음7.5
CVE-2026-69978Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.0.3%보통5.6
CVE-2026-78058Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all pla…0.3%미평가
CVE-2026-120046Nezha 2.0.0 before 2.4.0 contains a NULL pointer dereference vulnerability in ServiceSentinel.loadTodayStats t…0.3%보통6.0
CVE-2026-16165IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.…0.3%높음7.5
CVE-2026-107613A NULL pointer dereference vulnerability in the Win8ScreenDriver component of GlavSoft TightVNC Server for Win…0.3%보통5.9
CVE-2026-93588ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a NULL pointer dereference in the PNM coder. When th…0.3%낮음2.3
CVE-2026-102623A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs)…0.3%보통6.5
CVE-2026-82055A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null…0.3%높음7.1
CVE-2026-112392Pillow is a Python imaging library. Prior to 13.0.0, Pillow's rank-based filters can dereference invalid image…0.3%높음8.2
CVE-2026-112405Pillow is a Python imaging library. From 12.0.0 until 13.0.0, Pillow's Image.merge() can dereference a null im…0.3%높음8.7
CVE-2026-84392A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS…0.3%낮음2.7
CVE-2026-111710Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's u…0.3%높음8.7
CVE-2026-107213Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, …0.3%높음8.7
CVE-2026-76787The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in z_impl…0.3%보통5.9
CVE-2026-92871A NULL pointer dereference vulnerability exists in Pgpool-II, which may allow an unauthenticated attacker to c…0.3%높음8.7
CVE-2026-116147ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 contains a null pointer dereference in the DJVU decoder b…0.3%보통6.3
CVE-2026-82357RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the dev…0.3%높음7.1
CVE-2026-102040A NULL Pointer Dereference vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS E…0.3%높음7.1
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.