← Back
CWE-908

962 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

JSON object

Loading...

CVEs (962)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Sep 9, 2026
Sep 9, 2026
N/A· v4
3.4 LOW· v3
N/A· v2
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security se...Show more
Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)Show less
1Microsoft
8Windows 10 1607
Windows 10 1809Windows 10 21h2+5 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
1Microsoft
7365 Apps
ExcelMicrosoft 365+4 more
Sep 17, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
1Microsoft
7365 Apps
ExcelMicrosoft 365+4 more
Sep 17, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
1Microsoft
6365 Apps
Microsoft 365Office 2016+3 more
Sep 17, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
-
Sep 8, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
1Microsoft
4Windows 10 1809
Windows Server 2019Windows Server 2022+1 more
Sep 21, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Use of uninitialized resource in Windows Failover Cluster allows an unauthorized attacker to disclose information over a network.
1Microsoft
8Windows 10 1607
Windows 10 1809Windows 10 21h2+5 more
Sep 21, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.
1Microsoft
7Windows 10 1607
Windows 10 1809Windows Server 2012+4 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 29, 2026
Sep 8, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
1Microsoft
12Windows 10 1607
Windows 10 1809Windows 10 21h2+9 more
Sep 30, 2026
Sep 8, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
5.7 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 24, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
1Microsoft
5Windows 11 23h2
Windows 11 24h2Windows 11 25h2+2 more
Sep 17, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally.
1Microsoft
13Windows 10 1607
Windows 10 1809Windows 10 21h2+10 more
Sep 29, 2026
Sep 8, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally.
1Microsoft
4Sql Server 2017
Sql Server 2019Sql Server 2022+1 more
Sep 15, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.
1Microsoft
4Sql Server 2017
Sql Server 2019Sql Server 2022+1 more
Sep 15, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network.