CVE-2026-92834 is a vulnerability in Apache Thrift's C++ WebSocket server involving the use of uninitialized resources and returning incorrect status codes. This flaw affects versions prior to 0.25.0. The issue has been fixed in Apache Thrift version 0.25.0. The vulnerability has a medium severity rating with a CVSS score of 6.3.
CVE-2026-85483 is a vulnerability in Apache Thrift's c_glib bindings involving the use of uninitialized resources and returning incorrect status codes. This flaw affects versions before 0.25.0. The issue has been addressed in Apache Thrift version 0.25.0, which users are advised to upgrade to.
CVE-2026-47600 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves a use of an uninitialized resource in the kernel mode layer during error handling. Exploitation could lead to code execution, privilege escalation, denial of service, information disclosure, and data tampering. The vulnerability has a high severity with a CVSS score of 7.8. No specific affected versions or patches are provided in the available data.
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerability might lead to information disclosure.
Imager versions before 1.036 for Perl contain a vulnerability where reading a paletted image with pixel indexes beyond the color map causes uninitialized heap memory disclosure. The palette is allocated without initialization, and pixel indexes equal to the palette size read unpopulated entries, leaking prior heap contents. This occurs when reading attacker-supplied images and then fetching pixels or converting them to RGB.
An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message validation, allowing local unprivileged processes to send unauthorized queries. Additionally, a reply buffer used by the port message handler was not properly initialized before returning data, leaking residual kernel pool memory from prior allocations. A local unprivileged attacker could exploit this vulnerability to enumerate DLP configuration and feature flags, extract live session tokens, and read kernel memory fragments from other users' operations.
CVE-2026-81958 is a vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise involving the use of an uninitialized resource. This flaw allows an unauthorized local attacker to disclose information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Microsoft has issued official fixes for affected versions.
CVE-2026-81391 is a vulnerability in Microsoft Office Excel within Microsoft 365 Apps for Enterprise involving the use of an uninitialized resource. This flaw allows an unauthorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Microsoft has released official fixes for affected versions. No known exploits are reported in the wild.
CVE-2026-80091 is a vulnerability in Microsoft 365 Apps for Enterprise involving the use of an uninitialized resource. This flaw allows an unauthorized attacker to disclose information over a network. The issue affects multiple versions of Microsoft 365 Apps for Enterprise prior to specific fixed releases. A patch is available and has been officially released by Microsoft.
CVE-2026-78519 is a high-severity vulnerability in Microsoft 365 Apps for Enterprise, specifically in Microsoft Office Outlook. It involves the use of an uninitialized resource that could allow an unauthorized attacker to execute code remotely over a network. The vulnerability affects multiple versions prior to fixed releases. An official fix is available from Microsoft.
CVE-2026-72989 is a vulnerability in Microsoft Windows 10 Version 1809 involving the use of an uninitialized resource in the Windows Failover Cluster component. This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a high severity rating with a CVSS score of 7.5. Official fixes have been released in specific Windows 10 builds to address this issue.
CVE-2026-69853 is a vulnerability in Microsoft Windows 10 Version 1607 involving the use of an uninitialized resource in the Win32K component. This flaw allows an authorized local attacker with low privileges to disclose sensitive information. The vulnerability has a medium severity score of 4.7 and has been officially fixed by Microsoft in several Windows 10 updates.
CVE-2026-69672 is a vulnerability in Microsoft Windows 10 Version 1607 and related versions involving the use of an uninitialized resource in the Windows DNS component. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Microsoft has issued official fixes for affected versions.
CVE-2026-69358 is a high-severity vulnerability in Microsoft Windows 10 Version 1607 and related builds involving the Remote Desktop Client. It arises from the use of an uninitialized resource, allowing an authorized attacker to execute code remotely over a network. Multiple Windows 10 versions prior to specific fixed builds are affected. An official fix is available from Microsoft.
CVE-2026-69288 is a vulnerability in Microsoft Windows 10 Version 1607 involving the use of an uninitialized resource in the Windows GDI+ component. This flaw allows an authorized local attacker to disclose sensitive information. The vulnerability has a medium severity rating with a CVSS score of 5.5. Official patches have been released to address this issue in multiple Windows 10 builds.
CVE-2026-68873 is a vulnerability in the Windows Program Compatibility Assistant Service on Windows 11 version 23H2 that allows an authorized local attacker to disclose sensitive information by insertion into log files. The flaw involves improper handling of sensitive data, which is logged in a way that could expose it to unauthorized local users. Microsoft has issued official fixes for affected versions.
CVE-2026-68852 is a vulnerability in Microsoft Windows 10 Version 1607 involving the use of an uninitialized resource in Microsoft Account. This flaw allows an authorized local attacker to disclose sensitive information. The issue affects multiple Windows 10 builds prior to specific fixed versions. A patch is available and has been officially released by Microsoft.
CVE-2026-68776 is a vulnerability in Microsoft SQL Server 2017 (CU 31) involving the use of an uninitialized resource. This flaw allows an authorized attacker to disclose sensitive information over a network. The vulnerability has a CVSS score of 6.5, indicating a medium severity level. Official patches have been released to address this issue in multiple SQL Server versions.