Vulnerabilities > Missing Initialization of Resource

DATE CVE VULNERABILITY TITLE RISK
2020-07-14 CVE-2020-1419 Missing Initialization of Resource vulnerability in Microsoft products
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'.
local
low complexity
microsoft CWE-909
5.5
2020-06-17 CVE-2018-21247 Missing Initialization of Resource vulnerability in multiple products
An issue was discovered in LibVNCServer before 0.9.13.
7.5
2020-06-11 CVE-2020-0195 Missing Initialization of Resource vulnerability in Google Android 10.0
In ihevcd_iquant_itrans_recon_ctb of ihevcd_iquant_itrans_recon_ctb.c and related functions, there is a possible information disclosure due to uninitialized data.
network
low complexity
google CWE-909
6.5
2020-06-11 CVE-2020-0134 Missing Initialization of Resource vulnerability in Google Android 10.0
In BnDrm::onTransact of IDrm.cpp, there is a possible information disclosure due to uninitialized data.
local
low complexity
google CWE-909
5.5
2020-05-14 CVE-2020-0101 Missing Initialization of Resource vulnerability in Google Android
In BnCrypto::onTransact of ICrypto.cpp, there is a possible information disclosure due to uninitialized data.
local
low complexity
google CWE-909
5.5
2020-04-14 CVE-2020-11741 Missing Initialization of Resource vulnerability in multiple products
An issue was discovered in xenoprof in Xen through 4.13.x, allowing guest OS users (with active profiling) to obtain sensitive information about other guests, cause a denial of service, or possibly gain privileges.
local
low complexity
xen fedoraproject debian opensuse CWE-909
8.8
2020-04-02 CVE-2020-11494 Missing Initialization of Resource vulnerability in multiple products
An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2.
local
low complexity
linux opensuse debian canonical CWE-909
4.4
2020-03-02 CVE-2020-6792 Missing Initialization of Resource vulnerability in multiple products
When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents.
network
low complexity
mozilla canonical CWE-909
4.3
2019-12-05 CVE-2019-19553 Missing Initialization of Resource vulnerability in multiple products
In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash.
network
low complexity
wireshark opensuse oracle debian CWE-909
7.5
2019-12-03 CVE-2019-19536 Missing Initialization of Resource vulnerability in multiple products
In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.
low complexity
linux debian opensuse CWE-909
4.6