Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.33proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak…Oct 14, 2026
- High8.3Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to au…Oct 14, 2026
- High8.8Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High8.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.EPSS 0.7%Oct 13, 2026
- High7.1FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing.EPSS 0.2%Oct 12, 2026
- Medium4.8FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when…EPSS 0.1%Oct 8, 2026
- Medium4.7Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory o…EPSS 0.2%Oct 6, 2026
- High7.8Microsoft Windows Heap-Based Buffer Overflow VulnerabilityKEVEPSS 3.6%Sep 8, 2026
- Low1.7An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obta…Aug 13, 2026
- High7.0netfilter: ebtables: zero chainstack arrayJul 25, 2026
- Critical9.1In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in __sctp_rcv_asconf_lookup() __sctp_rcv_asconf_lookup() in net/sctp/input.c…Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_exthdr: fix register tracking for F_PRESENT flag nft_exthdr_init() passes user-contr…Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fuse: limit FUSE_NOTIFY_RETRIEVE to uptodate folios FUSE_NOTIFY_RETRIEVE must be limited to uptodat…Jun 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: usb: usblp: fix uninitialized heap leak via LPGETSTATUS ioctl Just like in a previous problem in th…May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: rtnetlink: zero ifla_vf_broadcast to avoid stack infoleak in rtnl_fill_vfinfo rtnl_fill_vfinfo…May 28, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize new folios before use KMSAN reports an uninitialized value in longest_match_st…EPSS 0.3%May 27, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak…May 1, 2026
- Medium4.6Use of uninitialized resource in Windows Boot Manager allows an unauthorized attacker to bypass a security feature with a physical attack.EPSS 0.5%Apr 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD __build_packet_message()…Apr 13, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp process_sdp() declare…Apr 13, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Before the referenced fixes the…Mar 25, 2026
- Medium6.9Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Mar 12, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() Blamed commit did not take care of VLAN…Jan 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - zero initialize memory allocated via sock_kmalloc Several crypto user API contexts…Jan 14, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Set merge to zero early in af_alg_sendmsg If an error causes af_alg_sendmsg to abo…Oct 4, 2025
64 records · page 1 of 3
PreviousNext