Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

CVEs (802)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-25586 1Gnu 1Binutils Jun 17, 2026 Sep 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
CVE-2023-25585 1Gnu 1Binutils Jun 17, 2026 Sep 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.
CVE-2023-38140 1Microsoft 8Windows 10 1607 Windows 10 1809Windows 10 21h2+5 more Jun 17, 2026 Sep 12, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Kernel Information Disclosure Vulnerability
CVE-2023-21276 1Google 1Android Jun 17, 2026 Aug 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction...Show more In writeToParcel of CursorWindow.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Show less
CVE-2023-21233 1Google 1Android Jun 17, 2026 Aug 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not nee...Show more In multiple locations of avrc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Show less
CVE-2023-22330 1Intel 88Nuc 11 Compute Element Cm11ebc4w Firmware Nuc 11 Compute Element Cm11ebi38w FirmwareNuc 11 Compute Element Cm11ebi58w Firmware+85 more Jun 17, 2026 Aug 11, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
CVE-2023-36913 1Microsoft 12Windows 10 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Aug 8, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2023-3488 1Silabs 1Gecko Software Development Kit Jun 17, 2026 Jul 28, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Uninitialized buffer in GBL parser in Silicon Labs GSDK v4.3.0 and earlier allows attacker to leak data from Secure stack via malformed GBL file.
CVE-2023-36836 1Juniper 2Junos Junos Os Evolved Jun 17, 2026 Jul 14, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial of Serv...Show more A Use of an Uninitialized Resource vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, authenticated attacker with low privileges to cause a Denial of Service (DoS). On all Junos OS and Junos OS Evolved platforms, in a Multicast only Fast Reroute (MoFRR) scenario, the rpd process can crash when a a specific low privileged CLI command is executed. The rpd crash will impact all routing protocols until the process has automatically been restarted. As the operational state which makes this issue exploitable is outside the attackers control, this issue is considered difficult to exploit. Continued execution of this command will lead to a sustained DoS. This issue affects: Juniper Networks Junos OS 19.4 version 19.4R3-S5 and later versions prior to 19.4R3-S9; 20.1 version 20.1R2 and later versions; 20.2 versions prior to 20.2R3-S7; 20.3 versions prior to 20.3R3-S5; 20.4 versions prior to 20.4R3-S6; 21.1 versions prior to 21.1R3-S4; 21.2 versions prior to 21.2R3-S2; 21.3 versions prior to 21.3R3-S1; 21.4 versions prior to 21.4R3; 22.1 versions prior to 22.1R1-S2, 22.1R2; 22.2 versions prior to 22.2R2. Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S6-EVO; 21.1-EVO version 21.1R1-EVO and later versions; 21.2-EVO version 21.2R1-EVO and later versions; 21.3-EVO versions prior to 21.3R3-S1-EVO; 21.4-EVO versions prior to 21.4R3-EVO; 22.1-EVO versions prior to 22.1R1-S2-EVO, 22.1R2-EVO; 22.2-EVO versions prior to 22.2R2-EVO. Show less
CVE-2021-0948 1Google 1Android Jun 17, 2026 Jul 13, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The PVRSRVBridgeGetMultiCoreInfo ioctl in the PowerVR kernel driver can return uninitialized kernel memory to user space. The contents of this memory could contain sensitive information.
CVE-2023-35326 1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 more Jun 17, 2026 Jul 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows CDP User Components Information Disclosure Vulnerability
CVE-2023-35325 1Microsoft 11Windows 10 1507 Windows 10 1607Windows 10 1809+8 more Jun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Print Spooler Information Disclosure Vulnerability
CVE-2023-32042 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jul 11, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 OLE Automation Information Disclosure Vulnerability
CVE-2023-32041 1Microsoft 9Windows 10 1607 Windows 10 1809Windows 10 21h2+6 more Jun 17, 2026 Jul 11, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Update Orchestrator Service Information Disclosure Vulnerability
CVE-2023-35847 1Virtualsquare 1Picotcp Jun 17, 2026 Jun 19, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
CVE-2023-2747 1Silabs 1Gecko Software Development Kit Jun 17, 2026 Jun 15, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized.
CVE-2023-21127 1Google 1Android Jun 17, 2026 Jun 15, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is n...Show more In readSampleData of NuMediaExtractor.cpp, there is a possible out of bounds write due to uninitialized data. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-12 Android-12L Android-13Android ID: A-275418191Show less
CVE-2023-32016 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 Jun 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Installer Information Disclosure Vulnerability
CVE-2023-29367 1Microsoft 4Windows Server 2012 Windows Server 2016Windows Server 2019+1 more Jun 17, 2026 Jun 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 iSCSI Target WMI Provider Remote Code Execution Vulnerability
CVE-2023-32213 1Mozilla 3Firefox Firefox EsrThunderbird Jun 17, 2026 Jun 2, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Previous 1...232425...41 Next