
David Leung ◎»@dhkleung
@ryzerth It is stupid, I agree. Dereferencing NULL had indeed led to more than just crashes. e.g. https://www.cve.org/CVERecord?id=CVE-2025-49686
1000070
2.2K followersView on X
Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Null pointer dereference in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 15 products

@ryzerth It is stupid, I agree. Dereferencing NULL had indeed led to more than just crashes. e.g. https://www.cve.org/CVERecord?id=CVE-2025-49686
21 of 21 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | microsoft | windows_10_1507 | - | - | x64 |
| OS | microsoft | windows_10_1507 | - | - | x86 |
| OS | microsoft | windows_10_1607 | - | - | x64 |
| OS | microsoft | windows_10_1607 | - | - | x86 |
| OS | microsoft | windows_10_1809 | - | - | x64 |
| OS | microsoft | windows_10_1809 | - | - | x86 |
| OS | microsoft | windows_10_21h2 | - | - | - |
| OS | microsoft | windows_10_22h2 | - | - | - |
| OS | microsoft | windows_11_22h2 | - | - | - |
| OS | microsoft | windows_11_23h2 | - | - | - |
| OS | microsoft | windows_11_24h2 | - | - | - |
| OS | microsoft | windows_server_2008 | - | - | x64 |
| OS | microsoft | windows_server_2008 | - | - | x86 |
| OS | microsoft | windows_server_2008 | r2 | - | x64 |
| OS | microsoft | windows_server_2012 | - | - | - |
| OS | microsoft | windows_server_2012 | r2 | - | - |
| OS | microsoft | windows_server_2016 | - | - | - |
| OS | microsoft | windows_server_2019 | - | - | - |
| OS | microsoft | windows_server_2022 | - | - | - |
| OS | microsoft | windows_server_2022_23h2 | - | - | - |
| OS | microsoft | windows_server_2025 | - | - | - |