CWE-908

Medium likelihood

Use of Uninitialized Resource

Parent: CWE-665 - Improper Initialization

The product uses or accesses a resource that has not been initialized.

811 vulnerabilities with CWE-908
CVE-2026-40422 MEDIUM
Microsoft Windows 10 Version 1607 - Windows File Explorer Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-56085 LOW
Dell PowerProtect Data Domain - Use of Uninitialized Resource
CVSS 3.3
CVE-2026-53467 MEDIUM
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
CVSS 5.3
CVE-2026-6686 MEDIUM
FatFs Use of Uninitialized Clusters After Seek Past EOF
CVSS 4.6
CVE-2026-53347 MEDIUM
drm/virtio: Fix driver removal with disabled KMS
CVSS 5.5
CVE-2026-53344 MEDIUM
pinctrl: mcp23s08: Initialize mcp->dev and mcp->addr before regmap init
CVSS 5.5
CVE-2026-54500 MEDIUM
Oj: intern.c form_attr has an uninitialized stack read
CVSS 5.3
CVE-2026-58051 MEDIUM
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
CVSS 6.5
CVE-2026-53311 MEDIUM
fuse: fix uninit-value in fuse_dentry_revalidate()
CVSS 5.5
CVE-2026-53243 MEDIUM
rseq: Fix using an uninitialized stack variable in rseq_exit_user_update()
CVSS 5.5
CVE-2026-53225 CRITICAL
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
CVSS 9.1
CVE-2026-53218 MEDIUM
netfilter: nft_exthdr: fix register tracking for F_PRESENT flag
CVSS 5.5
CVE-2026-53170 HIGH
accel/ethosu: reject DMA commands with uninitialized length
CVSS 8.8
CVE-2026-53167 MEDIUM
fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios
CVSS 5.5
CVE-2026-53142 MEDIUM
drm/xe/display: fix oops in suspend/shutdown without display
CVSS 5.5
CVE-2026-53082 MEDIUM
net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf
CVSS 5.5
CVE-2026-53029 MEDIUM
fs/ntfs3: prevent uninitialized lcn caused by zero len
CVSS 5.5
CVE-2026-52989 CRITICAL
nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
CVSS 9.8
CVE-2026-52985 MEDIUM
netdevsim: zero initialize struct iphdr in dummy sk_buff
CVSS 5.5
CVE-2026-56968 LOW
Gnu Sasl < 2.2.4 - Numeric Range Comparison Without Minimum Check
CVSS 3.7
CVE-2026-11576 HIGH
Eclipse ThreadX - NetX Duo < 6.5.0.202601 - Double Free
CVSS 7.5
CVE-2026-42969 MEDIUM
Microsoft Windows 10 Version 1607 - Windows Push Notification Information Disclosure Vulnerability
CVSS 5.5
CVE-2026-48104 MEDIUM
GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read
CVSS 4.2
CVE-2026-48101 MEDIUM
GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure
CVSS 6.5
CVE-2026-11089 MEDIUM
Google Chrome - Use of Uninitialized Variable
CVSS 6.5
Details
Vulnerabilities 811
Exploit Likelihood Medium