CWE-908 · Use of Uninitialized Resource (page 6)
Page 6 of 9 — CVEs classified under CWE-908, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-35000 | Low | 3.3 | 2024-05-07 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive inf… |
CVE-2021-34999 | Medium | 5.5 | 2024-05-07 | OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive inf… |
CVE-2023-42079 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… |
CVE-2023-42062 | High | 7.8 | 2024-05-03 | PDF-XChange Editor U3D File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2023-42056 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor U3D File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… |
CVE-2023-42048 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… |
CVE-2023-42046 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor J2K File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… |
CVE-2023-39484 | Medium | 5.5 | 2024-05-03 | PDF-XChange Editor PDF File Parsing Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… |
CVE-2024-27022 | High | 7.8 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: fork: defer linking file vma until vma is fully initialized Thorvald reported a WARNING [… |
CVE-2024-26973 | Medium | 5.5 | 2024-05-01 | In the Linux kernel, the following vulnerability has been resolved: fat: fix uninitialized field in nostale filehandles When fat_encode_fh_nostale() encodes… |
CVE-2022-48654 | High | 7.1 | 2024-04-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() nf_osf_find() incorre… |
CVE-2024-26901 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak syzbot identified a kernel… |
CVE-2024-26876 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: drm/bridge: adv7511: fix crash on irq during probe Moved IRQ registration down to end of… |
CVE-2024-26863 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsr_get_node() KMSAN reported the following uninit-value… |
CVE-2024-26857 | High | 7.3 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: geneve: make sure to pull inner header in geneve_rx() syzbot triggered a bug in geneve_rx… |
CVE-2024-26849 | Medium | 5.5 | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: netlink: add nla be16/32 types to minlen array BUG: KMSAN: uninit-value in nla_validate_r… |
CVE-2024-3862 | Medium | 5.3 | 2024-04-16 | The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability af… |
CVE-2024-29838 | High | 7.5 | 2024-04-15 | The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker… |
CVE-2024-31874 | Medium | 6.2 | 2024-04-10 | IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could allow a local user to cause a denial of servi… |
CVE-2024-26220 | Medium | 5.0 | 2024-04-09 | Windows Mobile Hotspot Information Disclosure Vulnerability |
CVE-2024-26209 | Medium | 5.5 | 2024-04-09 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2024-29745 | Medium | 5.5 | 2024-04-05 | there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges n… |
CVE-2024-3299 | High | 7.8 | 2024-04-04 | Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS… |
CVE-2024-26805 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: netlink: Fix kernel-infoleak-after-free in __skb_datagram_iter syzbot reported the follow… |
CVE-2024-26788 | Medium | 5.5 | 2024-04-04 | In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-qdma: init irq after reg initialization Initialize the qDMA irqs after the… |
CVE-2024-26711 | Medium | 5.5 | 2024-04-03 | In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4130: zero-initialize clock init data The clk_init_data struct does not have… |
CVE-2024-26644 | Medium | 5.5 | 2024-03-26 | In the Linux kernel, the following vulnerability has been resolved: btrfs: don't abort filesystem when attempting to snapshot deleted subvolume If the source… |
CVE-2021-47139 | Medium | 5.5 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: hns3: put off calling register_netdev() until client initialize complete Currently… |
CVE-2021-47136 | High | 8.6 | 2024-03-25 | In the Linux kernel, the following vulnerability has been resolved: net: zero-initialize tc skb extension on allocation Function skb_ext_add() doesn't initia… |
CVE-2024-1848 | High | 7.8 | 2024-03-22 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-26641 | High | 8.6 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv(… |
CVE-2024-26638 | Medium | 4.4 | 2024-03-18 | In the Linux kernel, the following vulnerability has been resolved: nbd: always initialize struct msghdr completely syzbot complains that msg->msg_get_inq va… |
CVE-2021-47101 | High | 7.1 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr… |
CVE-2021-47096 | Medium | 4.0 | 2024-03-04 | In the Linux kernel, the following vulnerability has been resolved: ALSA: rawmidi - fix the uninitalized user_pversion The user_pversion was uninitialized fo… |
CVE-2023-52577 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: dccp: fix dccp_v4_err()/dccp_v6_err() again dh->dccph_x is the 9th byte (offset 8) in "st… |
CVE-2023-52528 | Medium | 5.5 | 2024-03-02 | In the Linux kernel, the following vulnerability has been resolved: net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg syzbot reported the fo… |
CVE-2021-47056 | Medium | 5.5 | 2024-02-29 | In the Linux kernel, the following vulnerability has been resolved: crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init ADF_STATUS_PF_RUNNIN… |
CVE-2024-1847 | High | 7.8 | 2024-02-28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Us… |
CVE-2024-21502 | High | 7.5 | 2024-02-24 | Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c… |
CVE-2024-23137 | High | 7.8 | 2024-02-22 | A maliciously crafted STP or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to uninitialized variables. This vulnerabilit… |
CVE-2024-26147 | High | 7.5 | 2024-02-21 | Helm is a package manager for Charts for Kubernetes. Versions prior to 3.14.2 contain an uninitialized variable vulnerability when Helm parses index and plugin… |
CVE-2024-23314 | High | 7.5 | 2024-02-14 | When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: S… |
CVE-2024-20694 | Medium | 5.5 | 2024-01-09 | Windows CoreMessaging Information Disclosure Vulnerability |
CVE-2023-42797 | Medium | 6.6 | 2024-01-09 | A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V05.20). The network… |
CVE-2023-4489 | Medium | 6.4 | 2023-12-14 | The first S0 encryption key is generated with an uninitialized PRNG in Z/IP Gateway products running Silicon Labs Z/IP Gateway SDK v7.18.3 and earlier. This ma… |
CVE-2023-36012 | Medium | 5.3 | 2023-12-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-31275 | High | 8.8 | 2023-11-27 | An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially craf… |
CVE-2023-46100 | Medium | 6.2 | 2023-11-20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource. |
CVE-2023-38151 | High | 8.8 | 2023-11-14 | Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability |
CVE-2023-36398 | Medium | 6.5 | 2023-11-14 | Windows NTFS Information Disclosure Vulnerability |
CVE-2023-45663 | Medium | 5.3 | 2023-10-21 | stb_image is a single file MIT licensed library for processing images. The stbi__getn function reads a specified number of bytes from context (typically a file… |
CVE-2023-31192 | Medium | 5.3 | 2023-10-12 | An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to… |
CVE-2023-36713 | Medium | 5.5 | 2023-10-10 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2023-36704 | High | 7.8 | 2023-10-10 | Windows Setup Files Cleanup Remote Code Execution Vulnerability |
CVE-2023-36567 | High | 7.5 | 2023-10-10 | Windows Deployment Services Information Disclosure Vulnerability |
CVE-2023-25588 | Medium | 4.7 | 2023-09-14 | A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an a… |
CVE-2023-25586 | Medium | 4.7 | 2023-09-14 | A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a… |
CVE-2023-25585 | Medium | 4.7 | 2023-09-14 | A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service. |
CVE-2023-38140 | Medium | 5.5 | 2023-09-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-21276 | Medium | 5.5 | 2023-08-14 | In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure wit… |
CVE-2023-21233 | High | 7.5 | 2023-08-14 | In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additi… |
CVE-2023-22330 | Medium | 6.0 | 2023-08-11 | Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2023-36913 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2023-3488 | Low | 3.8 | 2023-07-28 | Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file. |
CVE-2023-36836 | Medium | 4.7 | 2023-07-14 | A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authent… |
CVE-2021-0948 | Medium | 5.5 | 2023-07-13 | The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could con… |
CVE-2023-35326 | Medium | 5.5 | 2023-07-11 | Windows CDP User Components Information Disclosure Vulnerability |
CVE-2023-35325 | High | 7.5 | 2023-07-11 | Windows Print Spooler Information Disclosure Vulnerability |
CVE-2023-32042 | Medium | 6.5 | 2023-07-11 | OLE Automation Information Disclosure Vulnerability |
CVE-2023-32041 | Medium | 5.5 | 2023-07-11 | Windows Update Orchestrator Service Information Disclosure Vulnerability |
CVE-2023-35847 | High | 7.5 | 2023-06-19 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero). |
CVE-2023-2747 | Low | 3.1 | 2023-06-15 | The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized. |
CVE-2023-21127 | High | 8.8 | 2023-06-15 | In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no… |
CVE-2023-32016 | Medium | 5.5 | 2023-06-14 | Windows Installer Information Disclosure Vulnerability |
CVE-2023-29367 | High | 7.8 | 2023-06-14 | iSCSI Target WMI Provider Remote Code Execution Vulnerability |
CVE-2023-32213 | High | 8.8 | 2023-06-02 | When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird… |
CVE-2023-24941 | Critical | 9.8 | 2023-05-09 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2023-28967 | High | 7.5 | 2023-04-17 | A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthe… |
CVE-2022-25737 | High | 7.5 | 2023-04-13 | Information disclosure in modem due to missing NULL check while reading packets received from local network |
CVE-2023-22897 | Medium | 6.5 | 2023-04-12 | An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achiev… |
CVE-2023-24886 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-27598 | High | 7.5 | 2023-03-15 | OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed `Via` header to OpenSIPS triggers… |
CVE-2023-23413 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2021-32846 | High | 7.7 | 2023-02-17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107, function `pci_vtsock_proc_tx` in `virtio-sock` can lead… |
CVE-2021-32845 | High | 7.7 | 2023-02-17 | HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, the implementation of `qnotify` at… |
CVE-2023-22281 | High | 7.5 | 2023-02-01 | On versions 17.0.x before 17.0.0.2, 16.1.x before 16.1.3.3, 15.1.x before 15.1.8, 14.1.x before 14.1.5.3, and all versions of 13.1.x, when a BIG-IP AFM NAT pol… |
CVE-2022-47012 | High | 7.5 | 2023-01-20 | Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21. |
CVE-2023-21753 | Medium | 5.5 | 2023-01-10 | Event Tracing for Windows Information Disclosure Vulnerability |
CVE-2022-31741 | High | 8.8 | 2022-12-22 | A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulnerability a… |
CVE-2020-36617 | Medium | 4.6 | 2022-12-18 | A vulnerability was found in ewxrjk sftpserver. It has been declared as problematic. Affected by this vulnerability is the function sftp_parse_path of the file… |
CVE-2022-2950 | High | 7.8 | 2022-12-13 | Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD… |
CVE-2022-2949 | High | 7.8 | 2022-12-13 | Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD… |
CVE-2022-32616 | Medium | 6.7 | 2022-11-08 | In isp, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-32615 | Medium | 6.7 | 2022-11-08 | In ccd, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2022-39283 | Medium | 5.9 | 2022-10-12 | FreeRDP is a free remote desktop protocol library and clients. All FreeRDP based clients when using the `/video` command line switch might read uninitialized d… |
CVE-2022-39282 | Low | 3.5 | 2022-10-12 | FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using `/parallel` command line switch might read uninitial… |
CVE-2022-34390 | High | 7.5 | 2022-10-12 | Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an S… |
CVE-2022-40768 | Medium | 5.5 | 2022-09-18 | drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lack… |
CVE-2022-29240 | High | 8.1 | 2022-09-15 | Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scyl… |
CVE-2022-2308 | Medium | 6.5 | 2022-09-01 | A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with… |