CWE-908
Use of Uninitialized Resource
Description
The product uses or accesses a resource that has not been initialized.
Hierarchy (View 1000)
CVEs mapped to this weakness (901)
page 43 of 46| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-93018 | 0.00 | — | 0.00 | Sep 18, 2026 | Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader… | |||
| CVE-2026-58546 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-58535 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-58533 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-57982 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network. | ||
| CVE-2026-57084 | Med | 0.00 | 5.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-57083 | Med | 0.00 | 5.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-56190 | Cri | 0.00 | 9.8 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network. | ||
| CVE-2026-55949 | Hig | 0.00 | 7.8 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally. | ||
| CVE-2026-55042 | Med | 0.00 | 5.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally. | ||
| CVE-2026-50690 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. | ||
| CVE-2026-50497 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-50455 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally. | ||
| CVE-2026-50376 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-55003 | Med | 0.00 | 6.5 | 0.01 | Jul 14, 2026 | Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network. | ||
| CVE-2026-54997 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. | ||
| CVE-2026-49801 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally. | ||
| CVE-2026-49165 | Hig | 0.00 | 7.1 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally. | ||
| CVE-2026-40422 | Med | 0.00 | 5.5 | 0.00 | Jul 14, 2026 | Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally. | ||
| CVE-2026-56085 | Low | 0.00 | 3.3 | 0.00 | Jul 3, 2026 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of uninitialized resource vulnerability. A low… |
- CVE-2026-93018Sep 18, 2026risk 0.00cvss —epss 0.00
Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader…
- risk 0.00cvss 6.5epss 0.01
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- risk 0.00cvss 6.5epss 0.01
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- risk 0.00cvss 6.5epss 0.01
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- risk 0.00cvss 6.5epss 0.01
Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.
- risk 0.00cvss 5.5epss 0.01
Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 9.8epss 0.01
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
- risk 0.00cvss 7.8epss 0.00
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
- risk 0.00cvss 5.5epss 0.01
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
- risk 0.00cvss 5.5epss 0.00
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
- risk 0.00cvss 6.5epss 0.01
Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.
- risk 0.00cvss 5.5epss 0.00
Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.
- risk 0.00cvss 6.5epss 0.01
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- risk 0.00cvss 6.5epss 0.01
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.
- risk 0.00cvss 5.5epss 0.00
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
- risk 0.00cvss 5.5epss 0.00
Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.
- risk 0.00cvss 7.1epss 0.00
Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.
- risk 0.00cvss 5.5epss 0.00
Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.
- risk 0.00cvss 3.3epss 0.00
Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of uninitialized resource vulnerability. A low…