CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft visual studio, visual studio 2017 +1 moreAn information disclosure vulnerability exists when Visual Studio improperly discloses limited...4.3 Medium
- microsoft office, office web apps, sharepoint enterprise server +4 more +6 moreMicrosoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft...3.3 Low
- mozilla firefox, firefox esr, thunderbird +8 more +10 moreAn integer overflow vulnerability in the Skia library when allocating memory for edge builders on...9.8 Critical
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreUse of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows,...4.3 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreUse of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows,...4.3 Medium
- vmware esxi, fusion, fusion pro / fusion +4 more +6 moreVMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6...5.5 Medium
- graphicsmagick, imagemagick, debian linux +2 moreImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE...7.5 High
- qemu, canonical ubuntu linux, debian linux +2 moreThe megasas_dcmd_cfg_read function in hw/scsi/megasas.c in QEMU, when built with MegaRAID SAS...4.4 Medium
- google android, linux kernel +1 moreThe LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in...5.5 Medium
- fedoraproject fedora, pcre perl compatible regular expression library, php +2 morePCRE before 8.38 mishandles the [: and \\ substrings in character classes, which allows remote...9.8 Critical
- xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...9.3 High
- sqlite, apple mac os x, watchos +3 more +5 moreSQLite before 3.8.9 does not properly implement the dequoting of collation-sequence names, which...7.5 High
- microsoft data access components, windows data access components +1 moreHeap-based buffer overflow in Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2 and Windows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 9 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerThe Vector Markup Language (VML) implementation in vgx.dll in Microsoft Internet Explorer 6...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerThe Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 does not properly handle objects in memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6, 7, and 8 does not properly handle objects in memory, which allows...9.3 High
- linux kernel, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreThe ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly...7.8 High
- debian linux, linux kernel, redhat enterprise linux desktop +5 more +7 moreThe Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all...7.8 High
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold...9.3 High
- apple cups, mac os x, mac os x server +4 more +6 moreThe ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize...7.5 High
- microsoft internet explorerMicrosoft Internet Explorer 6 does not properly handle errors related to using the...8.8 High
- opera browserOpera before 9.52 on Windows, Linux, FreeBSD, and Solaris, when processing custom shortcut and...8.8 High
- havp http antivirus proxysockethandler.cpp in HTTP Antivirus Proxy (HAVP) 0.88 allows remote attackers to cause a denial...7.5 High
- apple mac os x, canonical ubuntu linux +1 moreMozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to cause a denial of service ...8.8 High
- mit kerberos 5, apple mac os x, mac os x server +7 more +9 moreThe Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) does not properly clear the unused...7.5 High
- microsoft excel, office, excel viewer +2 moreUnspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office...9.8 Critical
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by...9.3 High