CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- google chromeUninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to...8.8 High
- [unknown] gvfs, red hat enterprise linux 10, enterprise linux 6 +3 more +5 moreGvfs: sftp: uninitialized heap disclosure in read_string()4.3 Medium
- google chromeUninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a...4.3 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a...6.5 Medium
- google chromeUninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...3.4 Low
- google chromeUninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...6.5 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...3.1 Low
- google chromeUninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...3.1 Low
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...4.3 Medium
- google chromeUninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker...3.1 Low
- academysoftwarefoundation openexrOpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure4.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.9 Medium
- freebsdKernel stack disclosure via timer_settime(2)5.5 Medium
- freebsdKernel stack disclosure in 32-bit compatibility support5.5 Medium
- freebsdKernel stack disclosure in Linux compatibility layer5.5 Medium
- freebsdRemote DOS via uninitialized memory access in KTLS receive3.3 Low
- google chromeUse of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote...3.1 Low
- ibm iIBM i is Affected By Multiple Vulnerabilities in NetServer8.1 High
- rsyncproject rsyncrsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry6.9 Medium
- palo alto networks pan-os, cloud ngfw, prisma access +1 more +3 morePAN-OS: Information Disclosure Vulnerability in URL Filtering1.7 Low
- microsoft excel, 365 apps, 365 apps for enterprise +11 more +13 moreMicrosoft Excel Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows GDI+ Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 2016 +9 more +11 moreMicrosoft Office Information Disclosure Vulnerability5.5 Medium
- microsoft office 365 for mac, office for android, office ltsc for mac 2021 +28 more +30 moreWindows Imaging Component Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Event Logging Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreMicrosoft COM for Windows Information Disclosure Vulnerability5.5 Medium
- sap se abap platformMemory Corruption vulnerability in SAP ABAP Platform5.3 Medium
- zephyrproject zephyrUpdateHub probe: uninitialized-heap out-of-bounds read of network-supplied metadata3.7 Low
- glibcwordexp with WRDE_APPEND can return or use invalid memory2.1 Low
- ffmpegFFmpeg 0.5 < 9.0 Uninitialized Heap Memory Read in TIFF Decoder6.8 Medium
- ffmpegFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in Screenpresso Decoder6.8 Medium
- ffmpegFFmpeg 3.0 < 9.0 Uninitialized Heap Memory Read in RSCC Decoder6.8 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreSssd: sssd: nss responder uninitialized heap disclosure in initgroups reply3.3 Low
- strukturag libheiflibheif: Reachable assertion in HeifContext::get_track() aborts on a valid-but-empty HEIF sequence file (context.cc:2110)4.3 Medium
- linux, linux kernel +1 moreALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup()3.3 Low
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: ebtables: zero chainstack array7.0 High
- linux, linux kernel +1 morehfs/hfsplus: zero-initialize buffer in hfs_bnode_read5.5 Medium
- linux, linux kernel +1 morecrypto: ccp - Do not initialize SNP for ioctl(SNP_COMMIT)5.5 Medium
- ffmpegFFmpeg LCL/ZLIB Video Decoder Information Disclosure via lcldec.c7.1 High
- libssh2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 morelibssh2 Heap Out-of-Bounds Read via publickey subsystem7.7 High
- Show moreLoading…