Skip to content
BackEsc
Sign in

CWE-476 · weakness in Memory Corruption

NULL Pointer Dereference

5,716 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
check available
2
likely to be exploited
75

Every one of the 5,716 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Windows Remote Access Connection Manager Denial of Service VulnerabilityCVE-2026-21525Microsoft · CVSS 6.2 · 5.0% likelycovered by CyberSIXT

    Microsoft

  2. FileZilla Server < 0.9.22 - DoS via Wildcard CommandsCVE-2006-656571% likely
  3. Apache HTTP Server - NULL Pointer DereferenceCVE-2018-8011Apache Software Foundation · 55% likely

    Apache

  4. Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2023-21758Microsoft · CVSS 7.5 · 93% likely

    Microsoft

  5. Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityCVE-2023-21547Microsoft · CVSS 7.5 · 89% likely

    Microsoft

  6. The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allow…CVE-2014-347086% likely
  7. The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafte…CVE-2016-074282% likely
  8. Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierCVE-2021-44224Apache Software Foundation · 82% likely

    Apache

  9. ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occu…CVE-2009-138680% likely
  10. Microsoft QUIC Denial of Service VulnerabilityCVE-2023-38171Microsoft · CVSS 7.5 · 71% likely

    Microsoft

  11. ksmbd: fix null pointer dereference in alloc_preauth_hash()CVE-2025-22037Linux · CVSS 7.5 · 69% likely

    Linux

  12. mod_session NULL pointer dereferenceCVE-2021-26690Apache Software Foundation · 65% likely

    Apache

  13. NULL pointer dereference in httpd coreCVE-2021-34798Apache Software Foundation · 65% likely

    Apache

  14. NULL pointer deref in signature_algorithms processingCVE-2021-3449OpenSSL · 64% likely

    OpenSSL

  15. Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demon…CVE-2014-970856% likely
  16. Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityCVE-2025-21285Microsoft · CVSS 7.5 · 56% likely

    Microsoft

  17. Bad (EC)DHE parameters cause a client crashCVE-2017-3730OpenSSL · 55% likely

    OpenSSL

  18. RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonst…CVE-2004-038955% likely
  19. A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.CVE-2017-7659Apache Software Foundation · 54% likely

    Apache

  20. handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the i…CVE-2022-44793CVSS 6.5 · 53% likely
  21. Segmentation fault in SSL_check_chainCVE-2020-1967OpenSSL · 53% likely

    OpenSSL

  22. In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could…CVE-2019-10097Apache HTTP Server · 53% likely
  23. NULL pointer dereference on specially crafted HTTP/2 requestCVE-2021-31618Apache Software Foundation · 52% likely

    Apache

  24. handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write acces…CVE-2022-44792CVSS 6.5 · 52% likely
  25. An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer co…CVE-2017-15120PowerDNS · CVSS 7.5 · 51% likely

    PowerDNS

  26. mod_proxy_http NULL pointer dereferenceCVE-2020-13950Apache Software Foundation · 50% likely

    Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in