Vulnerabilities > Improper Initialization

DATE CVE VULNERABILITY TITLE RISK
2020-01-03 CVE-2019-13765 Improper Initialization vulnerability in Google Chrome
Use-after-free in content delivery manager in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-665
6.5
2019-12-29 CVE-2019-20063 Improper Initialization vulnerability in Symonics Libmysofa
hdf/dataobject.c in libmysofa before 0.8 has an uninitialized use of memory, as demonstrated by mysofa2json.
network
symonics CWE-665
6.8
2019-12-18 CVE-2019-8629 Improper Initialization vulnerability in Apple mac OS X
A memory initialization issue was addressed with improved memory handling.
network
apple CWE-665
critical
9.3
2019-12-18 CVE-2019-8552 Improper Initialization vulnerability in Apple products
A memory initialization issue was addressed with improved memory handling.
network
apple CWE-665
6.8
2019-12-18 CVE-2019-8540 Improper Initialization vulnerability in Apple products
A memory initialization issue was addressed with improved memory handling.
network
apple CWE-665
7.1
2019-12-18 CVE-2019-8504 Improper Initialization vulnerability in Apple Iphone OS
A memory initialization issue was addressed with improved memory handling.
local
low complexity
apple CWE-665
2.1
2019-11-19 CVE-2019-19126 Improper Initialization vulnerability in multiple products
On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.
local
low complexity
gnu canonical fedoraproject debian CWE-665
3.3
2019-11-14 CVE-2019-14565 Improper Initialization vulnerability in Intel Software Guard Extensions SDK
Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.
local
low complexity
intel CWE-665
7.8
2019-11-12 CVE-2019-1409 Improper Initialization vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows Remote Procedure Call (RPC) runtime improperly initializes objects in memory, aka 'Windows Remote Procedure Call Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-665
2.1
2019-11-06 CVE-2014-8181 Improper Initialization vulnerability in Redhat Enterprise Linux and Enterprise MRG
The kernel in Red Hat Enterprise Linux 7 and MRG-2 does not clear garbage data for SG_IO buffer, which may leaking sensitive information to userspace.
local
low complexity
redhat CWE-665
2.1