CWE-476 · Memory Corruption
NULL Pointer Dereference
5,716CVEs
1exploited
2with a public check
75likely (EPSS 10%+)
SortMost likely exploited
5,716 CVEs with CWE-476 as their weakness · the first 2,000 are paged here; the Atlas names every one
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-21525In CISA KEVExploitedWindows Remote Access Connection Manager Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 6.2 · 2026-02-10 | 6.2 | 5.0% | 2026-02-10 |
| CVE-2006-6565CheckFileZilla Server < 0.9.22 - DoS via Wildcard CommandsFilezilla-Project · Filezilla Server · 2006-12-15 | – | 71% | 2006-12-15 |
| CVE-2018-8011CheckApache HTTP Server - NULL Pointer DereferenceApache Software Foundation · Apache HTTP Server · 2018-07-18 | – | 55% | 2018-07-18 |
| CVE-2023-21758Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-01-10 | 7.5 | 93% | 2023-01-10 |
| CVE-2023-21547Internet Key Exchange (IKE) Protocol Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2023-01-10 | 7.5 | 89% | 2023-01-10 |
| CVE-2014-3470The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allow…Openssl · Openssl · 2014-06-05 | – | 86% | 2014-06-05 |
| CVE-2016-0742The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafte…F5 · Nginx · 2016-02-15 | – | 82% | 2016-02-15 |
| CVE-2021-44224Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierApache Software Foundation · Apache HTTP Server · 2021-12-20 | – | 82% | 2021-12-20 |
| CVE-2009-1386ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occu…Openssl · Openssl · 2009-06-04 | – | 80% | 2009-06-04 |
| CVE-2023-38171Microsoft QUIC Denial of Service VulnerabilityMicrosoft · Microsoft Visual Studio 2022 version 17.2 · CVSS 7.5 · 2023-10-10 | 7.5 | 71% | 2023-10-10 |
| CVE-2025-22037ksmbd: fix null pointer dereference in alloc_preauth_hash()Linux · Linux · CVSS 7.5 · 2025-04-16 | 7.5 | 69% | 2025-04-16 |
| CVE-2021-26690mod_session NULL pointer dereferenceApache Software Foundation · Apache HTTP Server · 2021-06-10 | – | 65% | 2021-06-10 |
| CVE-2021-34798NULL pointer dereference in httpd coreApache Software Foundation · Apache HTTP Server · 2021-09-16 | – | 65% | 2021-09-16 |
| CVE-2021-3449NULL pointer deref in signature_algorithms processingOpenSSL · OpenSSL · 2021-03-25 | – | 64% | 2021-03-25 |
| CVE-2014-9708Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demon…Embedthis · Appweb · 2015-03-31 | – | 56% | 2015-03-31 |
| CVE-2025-21285Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2025-01-14 | 7.5 | 56% | 2025-01-14 |
| CVE-2017-3730Bad (EC)DHE parameters cause a client crashOpenSSL · OpenSSL · 2017-05-04 | – | 55% | 2017-05-04 |
| CVE-2004-0389RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonst…Realnetworks · Helix Universal Server · 2004-04-17 | – | 55% | 2004-04-17 |
| CVE-2017-7659A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.Apache Software Foundation · Apache HTTP Server · 2017-07-26 | – | 54% | 2017-07-26 |
| CVE-2022-44793handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the i…Net-Snmp · Net-Snmp · CVSS 6.5 · 2022-11-07 | 6.5 | 53% | 2022-11-07 |
| CVE-2020-1967Segmentation fault in SSL_check_chainOpenSSL · OpenSSL · 2020-04-21 | – | 53% | 2020-04-21 |
| CVE-2019-10097In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could…Apache · Apache HTTP Server · 2019-09-26 | – | 53% | 2019-09-26 |
| CVE-2021-31618NULL pointer dereference on specially crafted HTTP/2 requestApache Software Foundation · Apache HTTP Server · 2021-06-15 | – | 52% | 2021-06-15 |
| CVE-2022-44792handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write acces…Net-Snmp · Net-Snmp · CVSS 6.5 · 2022-11-07 | 6.5 | 52% | 2022-11-07 |
| CVE-2017-15120An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer co…PowerDNS · pdns-recursor · CVSS 7.5 · 2018-07-27 | 7.5 | 51% | 2018-07-27 |
| CVE-2020-13950mod_proxy_http NULL pointer dereferenceApache Software Foundation · Apache HTTP Server · 2021-06-10 | – | 50% | 2021-06-10 |
| CVE-2016-4957ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix…Ntp · Ntp · 2016-07-05 | – | 45% | 2016-07-05 |
| CVE-2007-0039The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of servic…Microsoft · Exchange Server · 2007-05-08 | – | 45% | 2007-05-08 |
| CVE-2015-3194crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)…Openssl · Openssl · 2015-12-06 | – | 44% | 2015-12-06 |
| CVE-2014-0198The do_ssl3_write function in s3_pkt.c in OpenSSL 1.x through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, does not properly manage a buffer pointer during certain recursive…Openssl · Openssl · 2014-05-06 | – | 40% | 2014-05-06 |
| CVE-2018-0833The Microsoft Server Message Block 2.0 and 3.0 (SMBv2/SMBv3) client in Windows 8.1 and RT 8.1 and Windows Server 2012 R2 allows a denial of service vulnerability due to how specia…Microsoft Corporation · Server Message Block · 2018-02-15 | – | 40% | 2018-02-15 |
| CVE-2020-17525Remote unauthenticated denial-of-service in Subversion mod_authz_svnApache Software Foundation · Apache Subversion · 2021-03-17 | – | 40% | 2021-03-17 |
| CVE-2004-0119The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from nul…Microsoft · Windows 2000 · 2004-04-16 | – | 40% | 2004-04-16 |
| CVE-2005-0772VERITAS Backup Exec 9.0 through 10.0 for Windows Servers, and 9.0.4019 through 9.1.307 for Netware, allows remote attackers to cause a denial of service (Remote Agent crash) via (…Veritas · Backup Exec · 2005-06-26 | – | 36% | 2005-06-26 |
| CVE-2016-7052crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.Openssl · Openssl · 2016-09-26 | – | 29% | 2016-09-26 |
| CVE-2019-3995ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sen…Elog Project · ELOG · 2019-12-17 | – | 29% | 2019-12-17 |
| CVE-2018-15937Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Succe…Adobe · Adobe Acrobat and Reader · 2018-10-12 | – | 28% | 2018-10-12 |
| CVE-2018-15931Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Succe…Adobe · Adobe Acrobat and Reader · 2018-10-12 | – | 28% | 2018-10-12 |
| CVE-2018-15930Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an untrusted pointer dereference vulnerability. Succe…Adobe · Adobe Acrobat and Reader · 2018-10-12 | – | 28% | 2018-10-12 |
| CVE-2024-37399A NULL pointer dereference in WLAvalancheService in Ivanti Avalanche 6.3.1 allows a remote unauthenticated attacker to crash the service, resulting in a DoS.Ivanti · Avalanche · CVSS 7.5 · 2024-08-14 | 7.5 | 28% | 2024-08-14 |
| CVE-2017-0016Microsoft Windows 10 Gold, 1511, and 1607; Windows 8.1; Windows RT 8.1; Windows Server 2012 R2, and Windows Server 2016 do not properly handle certain requests in SMBv2 and SMBv3…Microsoft Corporation · SMBv2/SMBv3 · 2017-03-17 | – | 27% | 2017-03-17 |
| CVE-2021-41524null pointer dereference in h2 fuzzingApache Software Foundation · Apache HTTP Server · 2021-10-05 | – | 26% | 2021-10-05 |
| CVE-2017-2893An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer de…Cesanta · Mongoose · CVSS 7.5 · 2017-11-07 | 7.5 | 25% | 2017-11-07 |
| CVE-2016-7053CMS Null dereferenceOpenSSL · OpenSSL · 2017-05-04 | – | 22% | 2017-05-04 |
| CVE-2019-5010An exploitable denial-of-service vulnerability exists in the X509 certificate parser of Python.org Python 2.7.11 / 3.6.6. A specially crafted X509 certificate can cause a NULL poi…Python · Python · CVSS 5.9 · 2019-10-31 | 5.9 | 21% | 2019-10-31 |
| CVE-2014-2497The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and applic…Php · Php · 2014-03-21 | – | 20% | 2014-03-21 |
| CVE-2011-1271The JIT compiler in Microsoft .NET Framework 3.5 Gold and SP1, 3.5.1, and 4.0, when IsJITOptimizerDisabled is false, does not properly handle expressions related to null strings,…Microsoft · .net Framework · CVSS 7.7 · 2011-05-10 | 7.7 | 20% | 2011-05-10 |
| CVE-2017-3169In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP reque…Apache Software Foundation · Apache HTTP Server · 2017-06-20 | – | 20% | 2017-06-20 |
| CVE-2006-4343The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service…Openssl · Openssl · 2006-09-28 | – | 19% | 2006-09-28 |
| CVE-2018-18065_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to…Net-Snmp · Net-Snmp · 2018-10-08 | – | 18% | 2018-10-08 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.