CWE-665

Medium likelihood

Improper Initialization

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

347 vulnerabilities with CWE-665
CVE-2021-1780 MEDIUM
iPadOS < 14.4 - Denial of Service via Memory Initialization Issue
CVSS 4.4
CVE-2021-0453 MEDIUM
Titan-M Chip Firmware - Info Disclosure
CVSS 4.4
CVE-2021-0452 MEDIUM
Android Titan M Chip Firmware - Local Information Disclosure via Uninitialized Data
CVSS 4.4
CVE-2021-0451 MEDIUM
Android Titan M Chip Firmware - Local Information Disclosure via Uninitialized Data
CVSS 4.4
CVE-2021-0450 MEDIUM
Android Titan M Chip Firmware - Local Information Disclosure via Uninitialized Data
CVSS 4.4
CVE-2021-0449 MEDIUM
Titan M Chip Firmware - Info Disclosure
CVSS 4.4
CVE-2021-1661 HIGH
Windows Installer < - Privilege Escalation
CVSS 7.8
CVE-2020-35342 HIGH
GNU Binutils < 2.34 - Information Leak via Uninitialized Heap in tic4x_print_cond
CVSS 7.5
CVE-2020-24475 MEDIUM
Intel(R) Server Boards, Server Systems and Compute Modules <2.48 - DoS
CVSS 5.5
CVE-2020-24507 MEDIUM
Intel(R) CSME <15.0.22 - Info Disclosure
CVSS 4.4
CVE-2020-12357 MEDIUM
Intel(R) Processors - Privilege Escalation
CVSS 6.7
CVE-2020-28019 HIGH
Exim 4.88-4.94.1 - Improper Initialization via BDAT Command
CVSS 7.5
CVE-2020-25578 MEDIUM
FreeBSD <12.2-STABLE r368969, 11.4-STABLE r369047, 12.2-RELEASE p3,...
CVSS 5.3
CVE-2020-35508 MEDIUM
Linux Kernel < 5.12 - Improper Initialization in Process ID Handling
CVSS 4.5
CVE-2020-26886 HIGH
Softaculous <5.5.7 - Privilege Escalation
CVSS 7.8
CVE-2020-0522 MEDIUM
Intel Ethernet Controller I210 Firmware < 3.30 - Denial of Service via Improper Initialization
CVSS 4.4
CVE-2020-10143 HIGH
Macrium Reflect < 7.3.5281 - Privilege Escalation via OpenSSL Configuration Path Manipulation
CVSS 7.8
CVE-2020-26957 MEDIUM
Firefox for Android < 83.0 - Certificate Revocation Bypass via Missing OneCRL Service Initialization
CVSS 6.5
CVE-2020-27950 MEDIUM KEV
iPadOS < 14.2 - Memory Disclosure via Mach Message Trailers
CVSS 5.5
CVE-2020-26933 HIGH
TCG Trusted Platform Module Library Family 2.0 - Info Disclosure
CVSS 7.2
CVE-2020-12326 MEDIUM
Intel Thunderbolt DCH Driver < 72 - Authenticated Information Disclosure via Improper Initialization
CVSS 5.5
CVE-2020-8744 HIGH
Intel CSME <12.0.70-14.5.25, TXE <4.0.30, SPS <E3_05.01.04.200 - Pr...
CVSS 7.8
CVE-2020-0450 MEDIUM
Android 8.0-11 - Unauthenticated Out-of-bounds Read in rw_i93_sm_format
CVSS 6.5
CVE-2020-3573 HIGH
Cisco Webex Meetings - Remote Code Execution via Malicious ARF or WRF File
CVSS 7.8
CVE-2020-25662 MEDIUM
Red Hat Enterprise Linux - Information Disclosure via Bluetooth AMP Packet Handling
CVSS 5.3
Details
Vulnerabilities 347
Exploit Likelihood Medium