CWE-665 · Improper Initialization (page 3)
Page 3 of 4 — CVEs classified under CWE-665, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-1661 | High | 7.8 | 2021-01-12 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2020-10143 | High | 7.8 | 2020-12-09 | Macrium Reflect includes an OpenSSL component that specifies an OPENSSLDIR variable as C:\openssl\. Macrium Reflect contains a privileged service that uses thi… |
CVE-2020-26957 | Medium | 6.5 | 2020-12-09 | OneCRL was non-functional in the new Firefox for Android due to a missing service initialization. This could result in a failure to enforce some certificate re… |
CVE-2020-27950 | Medium | 5.5 | 2020-12-08 | A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High… |
CVE-2020-26933 | High | 7.2 | 2020-11-18 | Trusted Computing Group (TCG) Trusted Platform Module Library Family 2.0 Library Specification Revisions 1.38 through 1.59 has Incorrect Access Control during… |
CVE-2020-12326 | Medium | 5.5 | 2020-11-12 | Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable infor… |
CVE-2020-8744 | High | 7.8 | 2020-11-12 | Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, Intel(R) TXE versions before 4.0.30 Inte… |
CVE-2020-0450 | Medium | 6.5 | 2020-11-10 | In rw_i93_sm_format of rw_i93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC w… |
CVE-2020-3573 | High | 7.8 | 2020-11-06 | Multiple vulnerabilities in Cisco Webex Network Recording Player for Windows and Cisco Webex Player for Windows could allow an attacker to execute arbitrary co… |
CVE-2020-25662 | Medium | 5.3 | 2020-11-05 | A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memor… |
CVE-2020-9863 | High | 7.8 | 2020-10-22 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, tvOS 13.4.8… |
CVE-2020-10139 | High | 7.8 | 2020-10-21 | Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. Acronis True Image cont… |
CVE-2020-10138 | High | 7.8 | 2020-10-21 | Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\. A… |
CVE-2020-16901 | Medium | 5.0 | 2020-10-16 | <p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an au… |
CVE-2020-9964 | Medium | 5.5 | 2020-10-16 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.0 and iPadOS 14.0. A local user may be able to read ke… |
CVE-2020-0414 | Medium | 6.5 | 2020-10-14 | In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass. This could le… |
CVE-2019-14556 | Medium | 4.4 | 2020-10-05 | Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow… |
CVE-2020-1592 | Medium | 4.4 | 2020-09-11 | <p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an au… |
CVE-2020-24996 | High | 7.8 | 2020-09-03 | There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2. It can be triggered by (for example) sending a… |
CVE-2020-12301 | High | 8.2 | 2020-08-13 | Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable esca… |
CVE-2020-8918 | Medium | 6.3 | 2020-08-11 | An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the au… |
CVE-2020-14347 | Medium | 5.5 | 2020-08-05 | A flaw was found in the way xserver memory was not properly initialized. This could leak parts of server memory to the X client. In cases where Xorg server run… |
CVE-2020-1389 | Medium | 5.5 | 2020-07-14 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2020-4067 | High | 7.0 | 2020-06-29 | In coturn before version 4.5.1.3, there is an issue whereby STUN/TURN response buffer is not initialized properly. There is a leak of information between diffe… |
CVE-2020-0586 | High | 7.8 | 2020-06-15 | Improper initialization in subsystem for Intel(R) SPS versions before SPS_E3_04.01.04.109.0 and SPS_E3_04.08.04.070.0 may allow an authenticated user to potent… |
CVE-2020-0529 | High | 7.8 | 2020-06-15 | Improper initialization in BIOS firmware for 8th, 9th and 10th Generation Intel(R) Core(TM) Processor families may allow an unauthenticated user to potentially… |
CVE-2020-9833 | Medium | 5.5 | 2020-06-09 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.5. A local user may be able to read kern… |
CVE-2020-3811 | High | 7.5 | 2020-05-26 | qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability. |
CVE-2020-10725 | High | 7.7 | 2020-05-20 | A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on t… |
CVE-2020-11655 | High | 7.5 | 2020-04-09 | SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's ini… |
CVE-2020-1617 | High | 7.5 | 2020-04-08 | This issue occurs on Juniper Networks Junos OS devices which do not support Advanced Forwarding Interface (AFI) / Advanced Forwarding Toolkit (AFT). Devices us… |
CVE-2020-9775 | Medium | 5.3 | 2020-04-01 | An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS… |
CVE-2020-3919 | High | 7.8 | 2020-04-01 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4… |
CVE-2019-7630 | High | 7.2 | 2020-03-25 | An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does no… |
CVE-2019-7245 | High | 7.2 | 2020-03-25 | An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly f… |
CVE-2019-7244 | High | 7.2 | 2020-03-25 | An issue was discovered in kerneld.sys in AIDA64 before 5.99. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x80112084 and does not properly filt… |
CVE-2019-7240 | High | 7.2 | 2020-03-25 | An issue was discovered in WinRing0x64.sys in Moo0 System Monitor 1.83. The vulnerable driver exposes a wrmsr instruction via IOCTL 0x9C402088 and does not pro… |
CVE-2020-0506 | Low | 2.3 | 2020-03-12 | Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentiall… |
CVE-2020-3872 | Medium | 5.5 | 2020-02-27 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13… |
CVE-2016-1000109 | Medium | 5.3 | 2020-02-19 | HHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted cli… |
CVE-2019-15875 | Low | 3.3 | 2020-02-18 | In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE… |
CVE-2019-6190 | Medium | 5.0 | 2020-02-14 | Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStati… |
CVE-2013-1634 | High | 7.5 | 2020-02-13 | A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the dev… |
CVE-2020-0561 | High | 7.8 | 2020-02-13 | Improper initialization in the Intel(R) SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local acces… |
CVE-2020-5529 | High | 8.1 | 2020-02-11 | HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute ar… |
CVE-2019-19411 | Low | 3.7 | 2020-01-21 | USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information l… |
CVE-2015-8367 | Critical | 9.8 | 2020-01-14 | The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object in… |
CVE-2019-13765 | Medium | 6.5 | 2020-01-03 | Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafte… |
CVE-2019-20063 | High | 8.8 | 2019-12-29 | hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json. |
CVE-2019-8629 | High | 7.8 | 2019-12-18 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Mojave 10.14.5. An application may be able to execute a… |
CVE-2019-8552 | High | 7.8 | 2019-12-18 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A mal… |
CVE-2019-8540 | Medium | 5.5 | 2019-12-18 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4, tvOS 12.2, watchOS 5.2. A mal… |
CVE-2019-8504 | Medium | 5.5 | 2019-12-18 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, macOS Mojave 10.14.4. A local user may be able to r… |
CVE-2019-19126 | Low | 3.3 | 2019-11-19 | On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program executio… |
CVE-2019-14565 | High | 7.8 | 2019-11-14 | Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenti… |
CVE-2019-1409 | Medium | 5.5 | 2019-11-12 | An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows Remo… |
CVE-2014-8181 | Medium | 5.5 | 2019-11-06 | The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace. |
CVE-2019-15681 | High | 7.5 | 2019-10-29 | LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory… |
CVE-2019-11747 | Medium | 6.5 | 2019-09-27 | The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes remo… |
CVE-2019-16921 | High | 7.5 | 2019-09-27 | In the Linux kernel before 4.17, hns_roce_alloc_ucontext in drivers/infiniband/hw/hns/hns_roce_main.c does not initialize the resp data structure, which might… |
CVE-2019-12646 | High | 7.5 | 2019-09-25 | A vulnerability in the Network Address Translation (NAT) Session Initiation Protocol (SIP) Application Layer Gateway (ALG) of Cisco IOS XE Software could allow… |
CVE-2019-1299 | Medium | 6.5 | 2019-09-11 | An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge H… |
CVE-2019-1274 | Medium | 5.5 | 2019-09-11 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2019-14271 | Critical | 9.8 | 2019-07-29 | In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library… |
CVE-2019-5605 | Medium | 6.5 | 2019-07-26 | In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of mem… |
CVE-2019-12979 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the SyncImageSettings function in MagickCore/image.c. This is related to AcquireImage… |
CVE-2019-12978 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the ReadPANGOImage function in coders/pango.c. |
CVE-2019-12977 | High | 7.8 | 2019-06-26 | ImageMagick 7.0.8-34 has a "use of uninitialized value" vulnerability in the WriteJP2Image function in coders/jp2.c. |
CVE-2019-1039 | Medium | 5.5 | 2019-06-12 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticate… |
CVE-2018-11949 | Critical | 9.8 | 2019-05-24 | Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sn… |
CVE-2017-18131 | High | 7.8 | 2019-05-06 | In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD 210/SD 21… |
CVE-2019-1840 | High | 8.6 | 2019-04-18 | A vulnerability in the DHCPv6 input packet processor of Cisco Prime Network Registrar could allow an unauthenticated, remote attacker to restart the server and… |
CVE-2019-0782 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosur… |
CVE-2019-0767 | Medium | 5.5 | 2019-04-09 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated… |
CVE-2018-4351 | Medium | 5.5 | 2019-04-03 | A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14. |
CVE-2019-1761 | Medium | 4.3 | 2019-03-28 | A vulnerability in the Hot Standby Router Protocol (HSRP) subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to recei… |
CVE-2018-12204 | Medium | 6.7 | 2019-03-14 | Improper memory initialization in Platform Sample/Silicon Reference firmware Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allo… |
CVE-2019-8277 | High | 7.5 | 2019-03-08 | UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for informa… |
CVE-2019-0663 | Medium | 5.5 | 2019-03-05 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated… |
CVE-2019-6230 | High | 8.6 | 2019-03-05 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A… |
CVE-2019-6208 | Medium | 5.5 | 2019-03-05 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious ap… |
CVE-2019-8259 | High | 7.5 | 2019-03-05 | UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for informat… |
CVE-2019-3464 | Critical | 9.8 | 2019-02-06 | Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users t… |
CVE-2018-20023 | High | 7.5 | 2018-12-19 | LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker… |
CVE-2018-20022 | High | 7.5 | 2018-12-19 | LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allo… |
CVE-2018-8514 | Medium | 5.5 | 2018-12-12 | An information disclosure vulnerability exists when Remote Procedure Call runtime improperly initializes objects in memory, aka "Remote Procedure Call runtime… |
CVE-2018-11943 | High | 7.8 | 2018-11-27 | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, while processing fastboot flash command, memory leak… |
CVE-2018-8408 | Medium | 5.5 | 2018-11-14 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vul… |
CVE-2018-8407 | Medium | 5.5 | 2018-11-14 | An information disclosure vulnerability exists when "Kernel Remote Procedure Call Provider" driver improperly initializes objects in memory, aka "MSRPC Informa… |
CVE-2018-14647 | High | 7.5 | 2018-09-25 | Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks a… |
CVE-2018-8419 | Medium | 5.5 | 2018-09-13 | An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka "Windows Kernel Information Disclosur… |
CVE-2018-16058 | High | 7.5 | 2018-08-30 | In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavd… |
CVE-2018-10915 | High | 8.5 | 2018-08-09 | A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an af… |
CVE-2018-14282 | High | 8.8 | 2018-07-31 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to ex… |
CVE-2018-14678 | High | 7.8 | 2018-07-28 | An issue was discovered in the Linux kernel through 4.17.11, as used in Xen through 4.11.x. The xen_failsafe_callback entry point in arch/x86/entry/entry_64.S… |
CVE-2018-10901 | High | 7.8 | 2018-07-26 | A flaw was found in Linux kernel's KVM virtualization subsystem. The VMX code does not restore the GDT.LIMIT to the previous host value, but instead sets it to… |
CVE-2017-12164 | Medium | 4.1 | 2018-07-26 | A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean during autologin. If autologin was enabled for a victim, an at… |
CVE-2018-2934 | Medium | 5.3 | 2018-07-18 | Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). The supported version th… |
CVE-2018-8121 | Medium | 4.7 | 2018-06-14 | An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory, aka "Windows Kernel Information Disclosure Vul… |
CVE-2017-5468 | Critical | 9.1 | 2018-06-11 | An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manua… |