CWE-908

Medium likelihood

Use of Uninitialized Resource

Parent: CWE-665 - Improper Initialization

The product uses or accesses a resource that has not been initialized.

761 vulnerabilities with CWE-908
CVE-2025-39690 MEDIUM
Linux Kernel 6.16-6.16.3 - Uninitialized Memory Exposure in sca3300 Accelerometer Driver
CVSS 5.5
CVE-2025-39684 MEDIUM
Linux Kernel 2.6.29-6.16.3 - Information Disclosure via Uninitialized Memory in COMEDI do_insn_ioctl
CVSS 5.5
CVE-2025-38737 MEDIUM
Linux Kernel 6.12-6.12.43, 6.13-6.16.3, 6.17 - Use-After-Free in SMB3 Transform Request Buffer Initialization
CVSS 5.5
CVE-2025-38718 HIGH
Linux Kernel 4.8-6.16.2 - Use of Uninitialized Resource in SCTP Packet Processing
CVSS 7.8
CVE-2025-38691 MEDIUM
Linux Kernel - Use-After-Free in pNFS Block/SCSI Layout Extent Encoding
CVSS 5.5
CVE-2025-36893 MEDIUM
Android - Local Information Disclosure via Uninitialized Data in ReadTachyonCommands
CVSS 5.5
CVE-2025-38658 MEDIUM
Linux Kernel 6.14-6.16.1 - Use of Uninitialized Resource in NVMe Target PCIe Endpoint Function
CVSS 5.5
CVE-2025-38644 MEDIUM
Linux Kernel - Use of Uninitialized Resource in TDLS Operation Handling
CVSS 5.5
CVE-2025-38628 MEDIUM
Linux Kernel - Use of Uninitialized Resource in vdpa/mlx5 Error Path
CVSS 5.5
CVE-2025-38613 MEDIUM
Linux Kernel 6.13-6.16.1 - Information Exposure via Uninitialized Memory in GPIB Board Info IOCTL
CVSS 5.5
CVE-2025-38608 MEDIUM
Linux Kernel - Data Corruption via Uninitialized Ciphertext Buffer in BPF ktls
CVSS 5.5
CVE-2025-38579 HIGH
Linux Kernel 5.15-6.16.1 - Use of Uninitialized Resource in F2FS Extent Info
CVSS 7.8
CVE-2025-38574 HIGH
Linux Kernel - Use of Uninitialized Resource in pptp_xmit
CVSS 7.8
CVE-2025-38531 MEDIUM
Linux Kernel < 6.12.40 - Use of Uninitialized Resource in ST Sensors Probe Functions
CVSS 5.5
CVE-2025-55198 MEDIUM
Helm < 3.18.5 - Denial of Service via YAML Parsing Panic
CVSS 6.5
CVE-2025-53759 HIGH
Microsoft Office Excel - Code Injection
CVSS 7.8
CVE-2025-53719 MEDIUM
Windows Server 2008-2025 Information Disclosure via Uninitialized Resource in RRAS
CVSS 5.7
CVE-2025-53153 MEDIUM
Windows Server 2008-2025 Information Disclosure via Uninitialized Resource in RRAS
CVSS 5.7
CVE-2025-53148 MEDIUM
Windows Server 2008-2025 RRAS Authenticated Information Disclosure via Uninitialized Resource
CVSS 5.7
CVE-2025-53138 MEDIUM
Windows Server 2008-2025 Information Disclosure via Uninitialized Resource in RRAS
CVSS 5.7
CVE-2025-50165 CRITICAL
Windows 11 24H2 and Windows Server 2025 < 10.0.26100.4851 - Remote Code Execution via Untrusted Pointer Dereference
CVSS 9.8
CVE-2025-50157 MEDIUM
Windows Server 2008-2025 Information Disclosure via Uninitialized Resource in RRAS
CVSS 5.7
CVE-2025-50156 MEDIUM
Windows Server 2008-2025 RRAS Authenticated Information Disclosure via Uninitialized Resource
CVSS 5.7
CVE-2025-38480 MEDIUM
Linux Kernel 2.6.29-6.15.8 - Use of Uninitialized Resource in Comedi insn_rw_emulate_bits()
CVSS 5.5
CVE-2025-38478 MEDIUM
Linux Kernel - Use of Uninitialized Resource in Comedi Subdevice Instruction Handler
CVSS 5.5
Details
Vulnerabilities 761
Exploit Likelihood Medium