Skip to content
CVE Tracker

CWE-476: NULL pointer dereference

5,896 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 5,896 in the listAtom feed of new CVEsWhat CWE-476 is, at MITRE (opens in a new tab)
Published CVEs
5,896
Last 12 months
1,234
Critical
134
Known exploited
1

Critical 134High 1,675Medium 3,909Low 174Not scored 4

CVEs per yearBy the year they were published

  1. 201863
  2. 2019255
  3. 20198
  4. 2020148
  5. 202024
  6. 2025890
  7. 2025519
  8. 2025605
  9. 2025565
  10. 2025223
  11. 20261,051
  12. 2026856

Known exploitedNewest addition to KEV first

  • CVE-2026-21525

    Windows Remote Access Connection Manager Denial of Service Vulnerability

    Microsoft · Windows 10 Version 1607

    ExploitedMedium6.2

Newest CVEs

  • CVE-2026-121522

    Possible panic from Git source resolver

    moby · BuildKit

    Medium6.7
  • CVE-2026-120955

    MongoDB C Driver Modern GridFS mongoc_gridfs_bucket_download_to_stream() Aborts Application on Malformed GridFS Metadata

    MongoDB · C Driver

    High8.7
  • CVE-2026-115297

    NULL Pointer Dereference in Packetbeat Leading to Denial of Service

    Elastic · Packetbeat

    Medium6.5
  • CVE-2026-120758

    NULL Pointer Dereference in H5HL_unprotect via Corrupted File

    The HDF Group · HDF5

    Medium5.4
  • CVE-2026-43603

    A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.

    AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics

    Medium6.9
  • CVE-2026-121402

    FreeRDP before 3.32.2 X11 Client Crash via Zero-Width RDPGFX ResetGraphics

    FreeRDP · FreeRDP

    High7.1
  • CVE-2026-121401

    FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet

    FreeRDP · FreeRDP

    Medium5.3
  • CVE-2026-115403

    NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full

    Eclipse Foundation · Eclipse ThreadX

    High8.2
  • CVE-2026-114408

    NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full

    Eclipse Foundation · Eclipse ThreadX

    High8.7
  • CVE-2026-120454

    The Sleuth Kit through 4.15.0 NULL Pointer Dereference via decmpfs LZVN Decompression

    The Sleuth Kit · The Sleuth Kit

    Medium6.8

Vendors it comes up for most

  1. Linux2,103
  2. Adobe123
  3. Qualcomm, Inc.118
  4. Microsoft101
  5. Red Hat88
  6. QNAP Systems Inc.87
  7. NVIDIA59
  8. tensorflow54
  9. Huawei47
  10. Juniper Networks33