Vulnerabilities > Use of Uninitialized Resource

DATE CVE VULNERABILITY TITLE RISK
2020-03-02 CVE-2020-6793 Use of Uninitialized Resource vulnerability in Mozilla Thunderbird
When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location.
network
low complexity
mozilla CWE-908
6.5
2020-02-27 CVE-2020-7042 Use of Uninitialized Resource vulnerability in multiple products
An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later.
5.3
2020-02-11 CVE-2020-6398 Use of Uninitialized Resource vulnerability in multiple products
Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
8.8
2020-02-07 CVE-2019-14044 Use of Uninitialized Resource vulnerability in Qualcomm products
Out of bound access due to access of uninitialized memory segment in an array of pointers while normal camera open close in Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SDM439, SDM630, SDM636, SDM660, SDX24
local
low complexity
qualcomm CWE-908
7.8
2020-01-08 CVE-2020-0007 Use of Uninitialized Resource vulnerability in Google Android
In flattenString8 of Sensor.cpp, there is a possible information disclosure of heap memory due to uninitialized data.
local
low complexity
google CWE-908
5.5
2020-01-08 CVE-2020-0006 Use of Uninitialized Resource vulnerability in Google Android
In rw_i93_send_cmd_write_single_block of rw_i93.cc, there is a possible information disclosure of heap memory due to uninitialized data.
network
low complexity
google CWE-908
6.5
2019-12-24 CVE-2019-19947 Use of Uninitialized Resource vulnerability in multiple products
In the Linux kernel through 5.4.6, there are information leaks of uninitialized memory to a USB device in the drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c driver, aka CID-da2311a6385c.
4.6
2019-12-10 CVE-2019-1462 Use of Uninitialized Resource vulnerability in Microsoft Office, Office 365 Proplus and Powerpoint
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.
local
low complexity
microsoft CWE-908
7.8
2019-12-10 CVE-2019-13751 Use of Uninitialized Resource vulnerability in multiple products
Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
6.5
2019-12-10 CVE-2019-13747 Use of Uninitialized Resource vulnerability in multiple products
Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google debian fedoraproject redhat CWE-908
8.8