CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- libeventLibevent: Dangling Pointer in `evbuffer_add_buffer_reference`5.8 Medium
- linux, linux kernel +1 moredevice property: set fwnode->secondary to NULL in fwnode_init()5.5 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU component7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU component7.5 High
- mozilla firefox, thunderbird +1 moreInformation disclosure due to uninitialized memory in the Graphics: WebGPU component7.5 High
- linux, linux kernel +1 moremm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free5.5 Medium
- linux, linux kernel +1 moreriscv: Fix register corruption from uninitialized cregs on error7.8 High
- linux, linux kernel +1 moreiio: adc: mt6359: fix unchecked return value in mt6358_read_imp5.5 Medium
- linux, linux kernel +1 moreieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()7.8 High
- linux, linux kernel +1 morenet: airoha: Do not read uninitialized fragment address in airoha_dev_xmit()9.8 Critical
- linux, linux kernel +1 moremedia: i2c: ov8856: free control handler on error in ov8856_init_controls()5.5 Medium
- f5 nginx open source, nginx plus, nginx gateway fabric +3 more +5 moreNGINX ngx_http_slice_module vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft office 365 for mac, office for android, office ltsc for mac 2021 +27 more +29 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft office 365 for mac, office for android, office ltsc for mac 2021 +26 more +28 moreWindows Media Photo Codec Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreRemote Desktop Protocol Remote Code Execution Vulnerability9.8 Critical
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows SMB Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreUniversal Plug and Play (upnp.dll) Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Client Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows SMB Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreWindows File Explorer Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows SMB Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +18 more +20 moreMicrosoft Windows App Store Information Disclosure Vulnerability7.1 High
- dell powerprotect data domain, data domain operating system +1 moreDell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0...3.3 Low
- imagemagickImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged5.3 Medium
- chan fatfsFatFs Use of Uninitialized Clusters After Seek Past EOF4.6 Medium
- linux, linux kernel +1 moredrm/virtio: Fix driver removal with disabled KMS5.5 Medium
- linux, linux kernel +1 morepinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init5.5 Medium
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 - Free of Uninitialized Pointer in publickey List Cleanup8.3 High
- linux, linux kernel +1 morefuse: fix uninit-value in fuse_dentry_revalidate()5.5 Medium
- linux, linux kernel +1 morerseq: Fix using an uninitialized stack variable in rseq_exit_user_update()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 moresctp: fix uninit-value in __sctp_rcv_asconf_lookup()9.1 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +5 more +7 morenetfilter: nft_exthdr: fix register tracking for F_PRESENT flag5.5 Medium
- linux, linux kernel +1 moreaccel/ethosu: reject DMA commands with uninitialized length8.8 High
- linux, linux kernel, siemens simatic s7-1500 tm mfp - gnu/linux subsystem +2 morefuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios5.5 Medium
- linux, linux kernel +1 moredrm/xe/display: fix oops in suspend/shutdown without display5.5 Medium
- linux, linux kernel +1 morenet: hamradio: 6pack: fix uninit-value in sixpack_receive_buf5.5 Medium
- linux, linux kernel +1 morefs/ntfs3: prevent uninitialized lcn caused by zero len5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morenvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers9.8 Critical
- linux, linux kernel +1 morenetdevsim: zero initialize struct iphdr in dummy sk_buff5.5 Medium
- gnu sasl, debian linux +1 moreGNU SASL before 2.2.4 lacks sanitization of a short challenge in _gsasl_ntlm_client_step in the...3.7 Low
- hamlibHamlib: rigctld `send_raw` Stack Out-of-Bounds Write and Uninitialized Memory Disclosure7.3 High
- ohler55 ojOj: intern.c form_attr has an uninitialized stack read5.3 Medium
- Show moreLoading…