CVE-2026-43840: Null Pointer Dereference
Published Oct 20, 2026
·Updated
A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the ondisconnected callback function.
Event History
Oct 20, 2026
CVE Published
via MITRE·08:28 AM
Data Sourced
via MITRE·08:28 AM
RemedyDescription
Frequently Asked Questions
1
What level of access does an attacker need to trigger the service crash?
The vulnerability can be exploited by an unauthenticated attacker; no authentication is required.
2
What is the expected impact of successful exploitation?
Successful exploitation can crash the license manager service, resulting in a denial of service for that service.