Skip to content
Noroxi

CWE-824 · 273 records

Access of Uninitialized Pointer

CVEs in this class

273 records

  • CVE-2022-21971
    77This week

    Windows Runtime Remote Code Execution Vulnerability

    HighCVSS 7.8KEVWeaponizedEPSS 53%

    microsoft · windows 10 1809Feb 9, 2022

  • CVE-2015-1770
    75This week

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Of

    HighCVSS 8.8KEVWeaponizedEPSS 34%

    microsoft · officeJun 9, 2015

  • CVE-2018-9948
    60This week

    This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 9.0.0.29935.

    MediumCVSS 6.5WeaponizedEPSS 62%

    foxitsoftware · foxit readerMay 17, 2018

  • CVE-2010-1818
    50Plan

    The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers

    CriticalCVSS 9.3WeaponizedEPSS 42%

    apple · quicktimeAug 31, 2010

  • CVE-2018-11803
    48Plan

    Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if

    HighCVSS 7.5No exploitEPSS 58%

    apache · subversionFeb 5, 2019

  • CVE-2017-12561
    48Plan

    A remote code execution vulnerability in HPE intelligent Management Center (iMC) PLAT version Plat 7.3 E0504P4 and earlier was found.

    CriticalCVSS 9.8Proof of conceptEPSS 30%

    hp · intelligent management centerFeb 15, 2018

  • CVE-2019-0853
    44Plan

    A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka

    HighCVSS 8.8No exploitEPSS 30%

    microsoft · windows 10Apr 9, 2019

  • CVE-2007-2442
    43Plan

    The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute ar

    CriticalCVSS 10.0No exploitEPSS 11%

    mit · kerberos 5Jun 26, 2007

  • CVE-2009-0846
    43Plan

    The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT Kerberos 5 (aka krb5) befor

    CriticalCVSS 10.0No exploitEPSS 8%

    mit · kerberos 5Apr 8, 2009

  • CVE-2018-14356
    40Plan

    An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16.

    CriticalCVSS 9.8No exploitEPSS 3%

    mutt · muttJul 17, 2018

  • CVE-2020-17446
    40Plan

    asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted

    CriticalCVSS 9.8No exploitEPSS 2%

    magic · asyncpgAug 12, 2020

  • CVE-2018-11743
    40Plan

    The init_copy function in kernel.c in mruby 1.4.1 makes initialize_copy calls for TT_ICLASS objects, which allows attackers to cause a denia

    CriticalCVSS 9.8No exploitEPSS 2%

    mruby · mrubyJun 5, 2018

  • CVE-2020-25573
    40Plan

    An issue was discovered in the linked-hash-map crate before 0.5.3 for Rust.

    CriticalCVSS 9.8No exploitEPSS 1%

    linked-hash-map project · linked-hash-mapSep 14, 2020

  • CVE-2021-36219
    40Plan

    An issue was discovered in SKALE sgxwallet 1.58.3.

    CriticalCVSS 9.8No exploitEPSS 1%

    skale · sgxwalletSep 27, 2021

  • CVE-2006-6143
    39Monitor

    The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other produc

    CriticalCVSS 9.3No exploitEPSS 8%

    mit · kerberos 5Dec 31, 2006

  • CVE-2020-11138
    39Monitor

    Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory result in instability i

    CriticalCVSS 9.8No exploitEPSS 1%

    qualcomm · apq8009Jan 21, 2021

  • CVE-2026-2805
    39Monitor

    Invalid pointer in the DOM: Core & HTML component

    CriticalCVSS 9.8No exploitEPSS 0%

    mozilla · firefoxFeb 24, 2026

  • CVE-2026-2785
    39Monitor

    Invalid pointer in the JavaScript Engine component

    CriticalCVSS 9.8No exploitEPSS 0%

    mozilla · firefoxFeb 24, 2026

  • CVE-2026-100788
    39Monitor

    Invalid pointer in the JavaScript: WebAssembly component

    CriticalCVSS 9.8No exploitEPSS 0%

    mozilla · firefoxSep 29, 2026

  • CVE-2026-109774
    39Monitor

    Invalid pointer, undefined behavior in the DOM: Notifications component

    CriticalCVSS 9.8No exploitEPSS 0%

    mozilla · firefoxOct 13, 2026

  • CVE-2020-8882
    38Monitor

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.916.

    HighCVSS 8.8No exploitEPSS 11%

    foxitsoftware · foxit studio photoMar 20, 2020

  • CVE-2017-16377
    37Monitor

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    HighCVSS 8.8No exploitEPSS 6%

    adobe · acrobatDec 9, 2017

  • CVE-2017-16378
    37Monitor

    An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

    HighCVSS 8.8No exploitEPSS 6%

    adobe · acrobatDec 9, 2017

  • CVE-2016-1005
    37Monitor

    Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux, Adobe AIR

    HighCVSS 8.8No exploitEPSS 5%

    adobe · flash playerMar 12, 2016

  • CVE-2018-19857
    37Monitor

    The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magi

    CriticalCVSS 9.1No exploitEPSS 3%

    videolan · vlc media playerDec 5, 2018

All vulnerability classes