CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
A kind of CWE-665 Improper Initialization.
From the CWE List. © The MITRE Corporation.
Newest
- python pillowPillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips8.7 High
- 3proxy3proxy 0.9.7 - 1.0.1 Uninitialized Stack Memory Disclosure via SOCKS46.3 Medium
- f5 nginx open source, nginx plus +1 moreNGINX ngx_http_ssl_module vulnerability8.3 High
- 7-zip7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table6.8 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Kernel Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Excel Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Modern Device Management (MDM) Information Disclosure Vulnerability5.5 Medium
- microsoft windows subsystem for linux, windows subsystem for linux (wsl2) +1 moreWindows Subsystem for Linux Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Kernel Information Disclosure Vulnerability4.7 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreHTTP.sys Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Event Logging Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 11 version 26h1, windows 11 26h1 +1 moreWindows Kernel-Mode Drivers Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +25 more +27 moreWindows Kernel-Mode Drivers Information Disclosure Vulnerability5.5 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +7 more +9 moreMicrosoft Office Word Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Print Spooler Components Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Event Logging Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Error Reporting Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreRPC Runtime Information Disclosure Vulnerability6.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWin32k Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Netlogon Information Disclosure Vulnerability5.5 Medium
- microsoft office for androidMicrosoft Office Graphics Component Information Disclosure Vulnerability5.5 Medium
- mozilla firefox, thunderbird +1 moreSandbox escape due to uninitialized memory in the DOM: Web Serial component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to uninitialized memory in the Graphics component7.1 High
- imagemagickImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in PostScript Decoder6.9 Medium
- freerdpFreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade7.1 High
- ffmpegFFmpeg through 9.0.2 Uninitialized Memory Disclosure via HDR10+ Metadata Serializer4.8 Medium
- coturnCoturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODE6.9 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote...6.5 Medium
- google chromeUninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...4.3 Medium
- google chromeUninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...4.3 Medium
- google chromeUninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...4.7 Medium
- google chromeUninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote...4.7 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a...4.7 Medium
- google chromeUninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker...4.3 Medium
- bytecodealliance wasmtimeWasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 Memory Disclosure via fd_readdir2.1 Low
- apache software foundation thriftApache Thrift: C++ WebSocket server transport does not read a full request length6.3 Medium
- apache software foundation thriftApache Thrift: c_glib TZlibTransport reports a full read after a premature stream end6.3 Medium
- Show moreLoading…