CWE-476 空指针解引用 类弱点 1557 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-476空指针解引用属于内存安全类漏洞，指程序在指针为NULL时仍尝试访问其指向的内存。攻击者通常通过构造特定输入触发空指针，导致程序崩溃引发拒绝服务，或在特定架构下利用该异常改变执行流以执行恶意代码。开发者应避免在解引用前未验证指针有效性，通过添加空值检查、使用静态分析工具检测潜在风险，并确保代码逻辑能妥善处理无效指针情况，从而从根本上消除隐患。
void host_lookup(char *user_supplied_addr){ struct hostent *hp; in_addr_t *addr; char hostname[64]; in_addr_t inet_addr(const char *cp); /*routine that ensures user_supplied_addr is in the right format for conversion */ validate_addr_form(user_supplied_addr); addr = inet_addr(user_supplied_addr); hp = gethostbyaddr( addr, sizeof(struct in_addr), AF_INET); strcpy(hostname, hp->h_name); }String cmd = System.getProperty("cmd"); cmd = cmd.trim();| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-72939 | Microsoft Windows Routing and Remote Access Service 异常处理不当漏洞 — Windows 10 Version 1607 | 6.5 | Medium | 2026-09-08 |
| CVE-2026-69744 | Microsoft Windows Kerberos 异常处理不当漏洞 — Windows 11 Version 24H2 | 7.5 | High | 2026-09-08 |
| CVE-2026-69587 | Microsoft Windows IKE Extension 异常处理不当漏洞 — Windows 11 version 23H2 | 7.5 | High | 2026-09-08 |
| CVE-2026-84392 | Fortinet FortiOS 异常处理不当漏洞 — FortiOS | 2.5 | Low | 2026-09-08 |
| CVE-2026-82055 | MongoDB Server 异常处理不当漏洞 — MongoDB Server | 6.5 | Medium | 2026-09-08 |
| CVE-2026-18453 | 389 Directory Server 异常处理不当漏洞 — Red Hat Directory Server 11.5 E4S for RHEL 8 | 7.5 | High | 2026-09-07 |
| CVE-2026-86097 | PX4-Autopilot 异常处理不当漏洞 — PX4-Autopilot | 6.5 | Medium | 2026-09-04 |
| CVE-2026-80118 | PassMark Software PerformanceTest 异常处理不当漏洞 — PerformanceTest | 7.1 | High | 2026-09-04 |
| CVE-2026-17273 | IBM i 异常处理不当漏洞 — i | 6.5 | Medium | 2026-09-04 |
| CVE-2026-85150 | GStreamer gst-rtsp-server 异常处理不当漏洞 — Red Hat Enterprise Linux 10 | 7.5 | High | 2026-09-03 |
| CVE-2026-17539 | Hitachi RTU500 异常处理不当漏洞 — RTU500 series CMU firmware | 5.9 | Medium | 2026-09-03 |
| CVE-2026-78222 | F5 NGINX JavaScript 异常处理不当漏洞 — NGINX JavaScript | 7.5 | High | 2026-09-02 |
| CVE-2026-82926 | SAMSUNG mTower 异常处理不当漏洞 — mTower | 5.5 | Medium | 2026-09-01 |
| CVE-2026-82821 | flvmeta 资源管理错误漏洞 — FLVMeta | 4.3 | Medium | 2026-08-31 |
| CVE-2026-82803 | Armink struct2json 资源管理错误漏洞 — struct2json | 5.3 | Medium | 2026-08-31 |
| CVE-2026-82588 | Open5GS 资源管理错误漏洞 — Open5GS | 4.3 | Medium | 2026-08-30 |
| CVE-2026-76650 | TP-Link TL-WR841N 异常处理不当漏洞 — TL-WR841N v14 | 5.3 | Medium | 2026-08-28 |
| CVE-2026-76649 | TP-Link TL-WR841N 异常处理不当漏洞 — TL-WR841N v14 | 5.3 | Medium | 2026-08-28 |
| CVE-2026-81490 | MongoDB BI Connector 异常处理不当漏洞 — BI Connector | 7.7 | High | 2026-08-28 |
| CVE-2026-75125 | PLANET GS-4210-16P2S 异常处理不当漏洞 — PLANET GS-4210-16P2S V3 | 4.9 | Medium | 2026-08-28 |
| CVE-2026-54084 | Wazuh 异常处理不当漏洞 — wazuh | 5.3 | Medium | 2026-08-27 |
| CVE-2026-48429 | Adobe Substance 3D Designer 异常处理不当漏洞 — Adobe Substance 3D Designer | 5.5 | Medium | 2026-08-25 |
| CVE-2026-24263 | NVIDIA DGX Spark 异常处理不当漏洞 — DGX Spark | 8.2 | High | 2026-08-25 |
| CVE-2026-13217 | zephyrproject Zephyr 异常处理不当漏洞 — zephyr | 5.9 | Medium | 2026-08-25 |
| CVE-2026-63076 | OpenSSL 异常处理不当漏洞 — OpenSSL | - | - | 2026-08-25 |
| CVE-2026-14457 | OpenSSL 异常处理不当漏洞 — OpenSSL | - | - | 2026-08-25 |
| CVE-2026-13213 | zephyrproject Zephyr 异常处理不当漏洞 — zephyr | 5.3 | Medium | 2026-08-24 |
| CVE-2026-71922 | DrayTek VigorSwitch 异常处理不当漏洞 — VigorSwitch G2540xs | 7.5 | High | 2026-08-24 |
| CVE-2026-71920 | DrayTek VigorSwitch 异常处理不当漏洞 — VigorSwitch G2540xs | 4.9 | Medium | 2026-08-24 |
| CVE-2026-78148 | ggml llama.cpp 资源管理错误漏洞 — llama.cpp | 5.3 | Medium | 2026-08-23 |
CWE-476（空指针解引用） 是常见的弱点类别，本平台收录该类弱点关联的 1557 条 CVE 漏洞。