Vulnerability index

Browse CVEs

744 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use of Uninitialized ResourceCWE-908 × clear
Linux Kernel MEDIUM 5.5
CVE-2024-42311

In the Linux kernel, the following vulnerability has been resolved: hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() Syzbot …

Fix: 4.19.320 / 5.4.282+
Fix from $1,600 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42312

In the Linux kernel, the following vulnerability has been resolved: sysctl: always initialize i_uid/i_gid Always initialize i_uid/i_gid inside the …

Fix: 4.10 / 4.15+
Fix from $1,600 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42283

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp conta…

Fix: 5.4.282 / 5.10.224+
Fix from $1,600 2024-08-17
Linux Kernel MEDIUM 5.5
CVE-2024-42272

In the Linux kernel, the following vulnerability has been resolved: sched: act_ct: take care of padding in struct zones_ht_key Blamed commit increa…

Fix: 5.10.224 / 5.15.165+
Fix from $1,600 2024-08-17
Xpdf HIGH 8.2
CVE-2024-7868

In Xpdf 4.05 (and earlier), invalid header info in a DCT (JPEG) stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept…

Fix: 4.06+
Fix from $1,950 2024-08-15
Windows 10 1507 MEDIUM 5.5
CVE-2024-38122

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Fix: 10.0.10240.20751 / 10.0.14393.7259+
Fix from $1,600 2024-08-13
Windows 10 1507 MEDIUM 5.5
CVE-2024-38118

Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability

Fix: 10.0.10240.20751 / 10.0.14393.7259+
Fix from $1,600 2024-08-13
Firefox MEDIUM 6.5
CVE-2024-7526

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. Th…

Fix: 115.14.0 / 129.0+
Fix from $1,600 2024-08-06
Ar8035 Firmware HIGH 7.8
CVE-2024-33021

Memory corruption while processing IOCTL call to set metainfo.

Patch available
Fix from $1,950 2024-08-05
Chrome HIGH 8.8
CVE-2024-6990

Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory ac…

Fix: 127.0.6533.88+
Fix from $1,950 2024-08-01
Linux Kernel MEDIUM 6.3
CVE-2024-42161

In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - U…

Fix: 5.10.222 / 5.15.163+
Fix from $1,600 2024-07-30
Linux Kernel HIGH 7.5
CVE-2024-42225

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: replace skb_put with skb_put_zero Avoid potentially reusing uniniti…

Fix: 5.15.163 / 6.1.98+
Fix from $1,950 2024-07-30
Linux Kernel HIGH 7.0
CVE-2024-42228

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc In…

Fix: 6.6.39 / 6.9.9+
Fix from $1,950 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42128

In the Linux kernel, the following vulnerability has been resolved: leds: an30259a: Use devm_mutex_init() for mutex initialization In this driver L…

Fix: 6.6.39 / 6.9.9+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42129

In the Linux kernel, the following vulnerability has been resolved: leds: mlxreg: Use devm_mutex_init() for mutex initialization In this driver LED…

Fix: 6.1.132 / 6.6.63+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42106

In the Linux kernel, the following vulnerability has been resolved: inet_diag: Initialize pad field in struct inet_diag_req_v2 KMSAN reported unini…

Fix: 4.19.318 / 5.4.280+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42113

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: initialize num_q_vectors for MSI/INTx interrupts When using MSI/INT…

Fix: 6.6.39 / 6.9.9+
Fix from $1,600 2024-07-30
Linux Kernel MEDIUM 5.5
CVE-2024-42096

In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is us…

Fix: 4.19.317 / 5.4.279+
Fix from $1,600 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2024-42063

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode syzbot …

Fix: 6.1.97 / 6.6.37+
Fix from $1,600 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2024-42076

In the Linux kernel, the following vulnerability has been resolved: net: can: j1939: Initialize unused data in j1939_send_one() syzbot reported ker…

Fix: 5.4 / 5.4.279+
Fix from $1,600 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2024-41052

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Init the count variable in collecting hot-reset devices The count var…

Fix: 6.6.41 / 6.9.10+
Fix from $1,600 2024-07-29
Linux Kernel HIGH 7.1
CVE-2024-41059

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-val…

Fix: 4.19.319 / 5.4.281+
Fix from $1,950 2024-07-29
Linux Kernel MEDIUM 5.5
CVE-2022-48864

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When cont…

Fix: 5.15.29 / 5.16.15+
Fix from $1,600 2024-07-16
Linux Kernel MEDIUM 5.5
CVE-2022-48807

In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handl…

Fix: 5.15 / 5.15.24+
Fix from $1,600 2024-07-16
Linux Kernel MEDIUM 5.5
CVE-2024-40998

In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In …

Fix: 6.6.36 / 6.9.7+
Fix from $1,600 2024-07-12
Linux Kernel MEDIUM 5.5
CVE-2024-40926

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: don't attempt to schedule hpd_work on headless cards If the card d…

Fix: 6.9.6+
Fix from $1,600 2024-07-12
Linux Kernel MEDIUM 5.5
CVE-2024-40931

In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly relat…

Fix: 5.10.221 / 5.15.162+
Fix from $1,600 2024-07-12
Linux Kernel MEDIUM 5.5
CVE-2024-39507

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status cha…

Fix: 5.15.162 / 6.1.95+
Fix from $1,600 2024-07-12
Linux Kernel MEDIUM 5.5
CVE-2024-39491

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance The cs_dsp instance is init…

Fix: 6.6.33 / 6.9.4+
Fix from $1,600 2024-07-10
Windows 10 1507 HIGH 7.5
CVE-2024-38064

Windows TCP/IP Information Disclosure Vulnerability

Fix: 10.0.10240.20710 / 10.0.14393.7159+
Fix from $1,950 2024-07-09