TYPE DE FAIBLESSE

CWE-665

170 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-665 (en anglais) →

CVE-2026-94370Les appareils utilisant Qt for MCUs sont affectés par un bug de corruption de mémoire dans la logique fondamentale de gestion des chaînes de caractères. Un attaquant disposant d'un… 6.5 MOYENNE

CVE-2026-107175Les instances MISP antérieures à la version 2.5.48 sont affectées par un bug qui empêche la mise à jour des corrélations d'événements lorsque les groupes de partage ou les niveaux … 5.3 MOYENNE

CVE-2026-57229Les systèmes de surveillance réseau Suricata (versions 8.0.0 à 8.0.6) sont concernés si le décodage SMTP MIME est activé. Un attaquant distant non authentifié peut envoyer un e-mai… 5.3 MOYENNE

CVE-2026-78940Les versions de Google Chrome antérieures à la 152.0.7977.65 sont affectées par une faille dans la manière dont le navigateur initialise les requêtes réseau. Un attaquant distant p… 4.3 MOYENNE

CVE-2026-12233Les systèmes utilisant le RTOS Zephyr avec le stockage protégé PSA activé pour les identifiants TLS sont susceptibles de subir un kernel panic. Un attaquant distant non authentifié… 5.9 MOYENNE

CVE-2026-20734Certaines versions du micrologiciel Intel AMT et Standard Manageability contiennent une faille qui pourrait permettre à un attaquant d'exposer des informations système sensibles. P… 5.6 MOYENNE

CVE-2026-44434Ce problème affecte les serveurs utilisant l'implémentation Quicly du protocole QUIC, principalement rencontrée dans le serveur HTTP H2O. Un attaquant positionné sur le chemin rése… 5.3 MOYENNE

CVE-2026-54777Les applications utilisant CoreWCF avec le transport NetNamedPipe sont susceptibles de subir une interception du trafic local. Un utilisateur local disposant de privilèges restrein… 6.5 MOYENNE

CVE-2026-12539Les bacs à sable (sandboxes) Docker (sbx) ne parviennent pas à réappliquer les blocages de sortie ICMP après le redémarrage d'un démon, permettant ainsi aux charges de travail situ… 5.7 MOYENNE

CVE-2025-35991Le micrologiciel UEFI d'Intel sur certaines plateformes contient une erreur d'initialisation qui pourrait permettre à un attaquant de divulguer des informations système sensibles. … 5.6 MOYENNE

CVE-2026-34553Les logiciels utilisant les bibliothèques iccDEV pour la gestion des profils colorimétriques sont affectés par un défaut dans le traitement des tables de correspondance (LUT). Un a… 4.0 MOYENNE

CVE-2025-12902Improper resource management in firmware of some Solidigm DC Products may allow an attacker with local or physical access to gain un-authorized access to a locked Storage Device or… 4.4 MOYENNE

CVE-2025-22834AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resourc… 4.2 MOYENNE

CVE-2025-5745The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the ca… 5.6 MOYENNE

CVE-2025-5702The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the cal… 5.6 MOYENNE

CVE-2025-21100Improper initialization in the UEFI firmware for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local acc… 5.6 MOYENNE

CVE-2025-25947An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt wi… 5.5 MOYENNE

CVE-2024-31157Improper initialization in UEFI firmware OutOfBandXML module in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. 6.8 MOYENNE

CVE-2024-26021Improper initialization in the firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via local… 4.6 MOYENNE

CVE-2024-12289Boundary Community Edition and Boundary Enterprise (“Boundary”) incorrectly handle HTTP requests during the initialization of the Boundary controller, which may cause the Boundary … 5.9 MOYENNE

CVE-2024-25563Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before version 23.40 may allow a privileged user to potentially enable … 4.6 MOYENNE

CVE-2024-45018In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload. 5.5 MOYENNE

CVE-2024-44947In the Linux kernel, the following vulnerability has been resolved: fuse: Initialize beyond-EOF page contents before setting uptodate fuse_notify_store(), unlike fuse_do_readpage… 5.5 MOYENNE

CVE-2023-48361Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via local access. 4.6 MOYENNE

CVE-2023-20591Improper re-initialization of IOMMU during the DRTM event may permit an untrusted platform configuration to persist, allowing an attacker to read or modify hypervisor memory, poten… 6.5 MOYENNE

CVE-2023-40261Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR17, 4.0.0 SR07, 4.1.0 SR04, 4.2.0 SR04, and 4.3.0 SR02 fails to validate file attributes during the Pre-Boot Authorizati… 6.8 MOYENNE

CVE-2024-42078In the Linux kernel, the following vulnerability has been resolved: nfsd: initialise nfsd_info.mutex early. nfsd_info.mutex can be dereferenced by svc_pool_stats_start() immediat… 5.5 MOYENNE

CVE-2023-32467Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit t… 5.7 MOYENNE

CVE-2024-39485In the Linux kernel, the following vulnerability has been resolved: media: v4l: async: Properly re-initialise notifier entry in unregister The notifier_entry of a notifier is not… 5.5 MOYENNE

CVE-2024-39301In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9_client_rpc() Syzbot with the help of KMSAN reported the following error: BUG: … 5.5 MOYENNE

CVE-2024-32930In plugin_ipc_handler of slc_plugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack mem… 5.5 MOYENNE

CVE-2024-32916In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execut… 5.9 MOYENNE

CVE-2023-45315Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service via local access. 5.5 MOYENNE

CVE-2021-46932In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in __flush_work(). … 5.5 MOYENNE

CVE-2023-36490Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access. 5.0 MOYENNE

CVE-2023-28720Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denia… 6.1 MOYENNE

CVE-2023-4503An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could all… 6.8 MOYENNE

CVE-2023-27306Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial of service via local access. 6.5 MOYENNE

CVE-2021-33634iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS. 6.3 MOYENNE

CVE-2023-5370On CPU 0 the check for the SMCCC workaround is called before SMCCC support has been initialized. This resulted in no speculative execution workarounds being installed on CPU 0. 5.5 MOYENNE

CVE-2023-20597Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 5.5 MOYENNE

CVE-2023-20594Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access. 4.4 MOYENNE

CVE-2023-40349Jenkins Gogs Plugin 1.0.15 and earlier improperly initializes an option to secure its webhook endpoint, allowing unauthenticated attackers to trigger builds of jobs. 5.3 MOYENNE

CVE-2023-27887Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via local access. 6.1 MOYENNE

CVE-2023-22444Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R)… 6.0 MOYENNE

CVE-2023-22356Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. 6.0 MOYENNE

CVE-2022-38083Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. 6.1 MOYENNE

CVE-2023-37479Open Enclave is a hardware-agnostic open source library for developing applications that utilize Hardware-based Trusted Execution Environments, also known as Enclaves. There are tw… 5.3 MOYENNE

CVE-2022-48518Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerabilit… 5.5 MOYENNE

CVE-2022-31477Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access. 4.0 MOYENNE