CWE-665 · Memory Corruption
Improper Initialization
336CVEs
SortMost likely exploited
336 CVEs with CWE-665 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-0847In CISA KEVExploitedA flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux ke…Linux · kernel · CVSS 7.8 · 2022-03-07 | 7.8 | 93% | 2022-03-07 |
| CVE-2020-27950In CISA KEVExploitedA memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Up…Apple · watchOS · CVSS 5.5 · 2020-12-08 | 5.5 | 17% | 2020-12-08 |
| CVE-2013-1675In CISA KEVExploitedMozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the n…Mozilla · Firefox · CVSS 6.5 · 2013-05-16 | 6.5 | 6.7% | 2013-05-16 |
| CVE-2023-1719CheckBitrix Component - Cross-Site ScriptingBitrix24 · Bitrix24 · CVSS 7.5 · 2023-11-01 | 7.5 | 6.3% | 2023-11-01 |
| CVE-2019-19411CheckHuawei Firewall - Local File InclusionHuawei · USG9500 · 2020-01-21 | – | 1.2% | 2020-01-21 |
| CVE-2022-22719mod_lua Use of uninitialized value of in r:parsebodyApache Software Foundation · Apache HTTP Server · 2022-03-14 | – | 70% | 2022-03-14 |
| CVE-2020-28019Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain getc functions is mis…Exim · Exim · 2021-05-06 | – | 62% | 2021-05-06 |
| CVE-2022-46164Account takeover via prototype vulnerabilityNodeBB · NodeBB · CVSS 9.4 · 2022-12-05 | 9.4 | 47% | 2022-12-05 |
| CVE-2022-37128In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.Dlink · Dir-816 Firmware · 2022-08-31 | – | 22% | 2022-08-31 |
| CVE-2019-14271In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that…Docker · Docker · 2019-07-29 | – | 19% | 2019-07-29 |
| CVE-2012-0012Microsoft Internet Explorer 9 does not properly handle the creation and initialization of string objects, which allows remote attackers to read data from arbitrary process-memory…Microsoft · Internet Explorer · 2012-02-14 | – | 16% | 2012-02-14 |
| CVE-2018-0853Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability,…Microsoft Corporation · Microsoft Office · 2018-02-15 | – | 12% | 2018-02-15 |
| CVE-2018-14647Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization. This could make it easy to conduct denial of service attacks against Expat by cons…The Python Project · Python · CVSS 5.3 · 2018-09-25 | 5.3 | 11% | 2018-09-25 |
| CVE-2008-0062KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute…Mit · Kerberos 5 · 2008-03-19 | – | 10% | 2008-03-19 |
| CVE-2017-13715The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote…Linux · Linux Kernel · 2017-08-28 | – | 9.7% | 2017-08-28 |
| CVE-2001-1471prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock…Phpbb · Phpbb · 2005-04-21 | – | 7.7% | 2005-04-21 |
| CVE-1999-0993Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.Microsoft · Exchange Server · 2000-02-04 | – | 7.1% | 2000-02-04 |
| CVE-2019-1299An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge HTML Information Disc…Microsoft · Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems · 2019-09-11 | – | 5.8% | 2019-09-11 |
| CVE-2008-3637The Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10.5.4, and 10.5.5 uses an uninitialized variable, which allows remote attackers to e…Apple · Mac Os X · 2008-09-26 | – | 5.7% | 2008-09-26 |
| CVE-2015-8367The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.Libraw · Libraw · 2020-01-14 | – | 5.6% | 2020-01-14 |
| CVE-2018-10915A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of li…PostgreSQL Global Development Group · postgresql · CVSS 8.5 · 2018-08-09 | 8.5 | 5.1% | 2018-08-09 |
| CVE-2016-1000109HHVM does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP…Facebook · Hhvm · 2020-02-19 | – | 5.1% | 2020-02-19 |
| CVE-2019-3464Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync…Debian GNU/Linux · rssh · 2019-02-06 | – | 4.7% | 2019-02-06 |
| CVE-2014-0178Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARR…Samba · Samba · 2014-05-28 | – | 4.5% | 2014-05-28 |
| CVE-2020-11655SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is misha…Sqlite · Sqlite · 2020-04-09 | – | 4.3% | 2020-04-09 |
| CVE-2018-0746The Windows kernel in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a…Microsoft Corporation · Windows kernel · 2018-01-04 | – | 4.1% | 2018-01-04 |
| CVE-2021-20613Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P502 Firmware version…Mitsubishielectric · MELSEC-F series FX3U-ENET; MELSEC-F series FX3U-ENET-L; MELSEC-F series FX3U-EN… · 2022-01-14 | – | 3.8% | 2022-01-14 |
| CVE-2016-9446The vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote attackers to obtain sensitive information as demonstrated by thumbnailing a simple 1 f…Gstreamer · Gstreamer · 2017-01-23 | – | 3.6% | 2017-01-23 |
| CVE-2018-16058In Wireshark 2.6.0 to 2.6.2, 2.4.0 to 2.4.8, and 2.2.0 to 2.2.16, the Bluetooth AVDTP dissector could crash. This was addressed in epan/dissectors/packet-btavdtp.c by properly ini…Wireshark · Wireshark · 2018-08-30 | – | 3.5% | 2018-08-30 |
| CVE-2019-6208A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2. A malicious application may cause…Apple · iOS · 2019-03-05 | – | 3.4% | 2019-03-05 |
| CVE-2022-36364Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vectorApache Software Foundation · Apache Calcite Avatica · 2022-07-28 | – | 3.2% | 2022-07-28 |
| CVE-2022-21724Unchecked Class Instantiation when providing Plugin ClassesPostgresql · Postgresql Jdbc Driver · CVSS 7 · 2022-02-02 | 7.0 | 3.1% | 2022-02-02 |
| CVE-2018-6947An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged u…Nomachine · Nomachine · 2018-02-28 | – | 3.1% | 2018-02-28 |
| CVE-2019-7630An issue was discovered in gdrv.sys in Gigabyte APP Center before 19.0227.1. The vulnerable driver exposes a wrmsr instruction via IOCTL 0xC3502580 and does not properly filter th…Gigabyte · App Center · 2020-03-25 | – | 3.1% | 2020-03-25 |
| CVE-2019-8259UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code, which allow an attacker to read stack memory and can be abused for information disclosure. Comb…UltraVNC · UltraVNC · 2019-03-05 | – | 3.0% | 2019-03-05 |
| CVE-2019-8277UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Com…Kaspersky Lab · UltraVNC · 2019-03-09 | – | 3.0% | 2019-03-09 |
| CVE-2018-20022LibVNC before 2f5b2ad1c6c99b1ac6482c95844a84d66bb52838 contains multiple weaknesses CWE-665: Improper Initialization vulnerability in VNC client code that allows attacker to read…Libvnc Project · LibVNC · 2018-12-19 | – | 2.9% | 2018-12-19 |
| CVE-2019-15681LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak (CWE-655) in VNC server code, which allow an attacker to read stack memory and can be abused f…Kaspersky · LibVNC · 2019-10-29 | – | 2.9% | 2019-10-29 |
| CVE-2018-0745The Windows kernel in Windows 10 version 1703. Windows 10 version 1709, and Windows Server, version 1709 allows an information disclosure vulnerability due to the way objects are…Microsoft Corporation · Windows kernel · 2018-01-04 | – | 2.9% | 2018-01-04 |
| CVE-2017-3820A vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S…Cisco · Cisco IOS XE 15.x · 2017-02-03 | – | 2.8% | 2017-02-03 |
| CVE-2022-22815path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.Python · Pillow · 2022-01-07 | – | 2.8% | 2022-01-07 |
| CVE-2018-14282This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerabi…Foxit · Foxit Reader · 2018-07-31 | – | 2.7% | 2018-07-31 |
| CVE-2018-7419In Wireshark 2.2.0 to 2.2.12 and 2.4.0 to 2.4.4, the NBAP dissector could crash. This was addressed in epan/dissectors/asn1/nbap/nbap.cnf by ensuring DCH ID initialization.Wireshark · Wireshark · 2018-02-23 | – | 2.7% | 2018-02-23 |
| CVE-2011-4087The br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39 does not properly initialize a certain data structure, which allows remote attacker…Linux · Linux Kernel · 2013-06-08 | – | 2.7% | 2013-06-08 |
| CVE-2018-10484This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this vulnerab…Foxit · Foxit Reader · 2018-05-17 | – | 2.6% | 2018-05-17 |
| CVE-2018-1175This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this…Foxit · Foxit Reader · 2018-05-17 | – | 2.5% | 2018-05-17 |
| CVE-2019-7245An issue was discovered in GPU-Z.sys in TechPowerUp GPU-Z before 2.23.0. The vulnerable driver exposes a wrmsr instruction via an IOCTL and does not properly filter the Model Spec…Techpowerup · Gpu-Z · 2020-03-25 | – | 2.5% | 2020-03-25 |
| CVE-2018-20023LibVNC before 8b06f835e259652b0ff026898014fc7297ade858 contains CWE-665: Improper Initialization vulnerability in VNC Repeater client code that allows attacker to read stack memor…Libvnc Project · LibVNC · 2018-12-19 | – | 2.5% | 2018-12-19 |
| CVE-2013-1634A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought i…Intel · 82574l Controller Firmware · 2020-02-13 | – | 2.5% | 2020-02-13 |
| CVE-2018-1174This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935. User interaction is required to exploit this…Foxit · Foxit Reader · 2018-05-17 | – | 2.5% | 2018-05-17 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.