CWE-908 对未经初始化资源的使用 类弱点 197 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-908 属于资源使用不当漏洞，指程序访问或操作未初始化的资源。攻击者通常利用此缺陷触发程序崩溃、非法内存访问或引发不可预期的异常行为，进而可能导致拒绝服务或进一步利用。开发者应避免此类问题，需在访问资源前确保其已完成正确的初始化流程，并增加对资源状态的严格检查与错误处理机制，以保障系统的稳定性与安全性。
private boolean initialized = true; public void someMethod() { if (!initialized) { // perform initialization tasks ... initialized = true; }$username = GetCurrentUser(); $state = GetStateData($username); if (defined($state)) { $uid = ExtractUserID($state); } # do stuff if ($uid == 0) { DoAdminThings(); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-53719 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows Server 2008 R2 Service Pack 1 | 5.7 | Medium | 2025-08-12 |
| CVE-2025-53153 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows Server 2008 R2 Service Pack 1 | 5.7 | Medium | 2025-08-12 |
| CVE-2025-53148 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows Server 2008 R2 Service Pack 1 | 5.7 | Medium | 2025-08-12 |
| CVE-2025-53138 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows Server 2008 R2 Service Pack 1 | 5.7 | Medium | 2025-08-12 |
| CVE-2025-50156 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows Server 2008 R2 Service Pack 1 | 5.7 | Medium | 2025-08-12 |
| CVE-2025-53759 | Microsoft Excel 安全漏洞 — Microsoft 365 Apps for Enterprise | 7.8 | High | 2025-08-12 |
| CVE-2025-2329 | Silicon Labs OpenThread RCP 安全漏洞 — OpenThread | 7.5 | - | 2025-07-25 |
| CVE-2025-41239 | VMware多款产品 安全漏洞 — ESXi | 7.1 | High | 2025-07-15 |
| CVE-2025-49718 | Microsoft SQL Server 安全漏洞 — Microsoft SQL Server 2019 (CU 32) | 7.5 | High | 2025-07-08 |
| CVE-2025-33070 | Microsoft Windows Netlogon 安全漏洞 — Windows 10 Version 1507 | 8.1 | High | 2025-06-10 |
| CVE-2025-33052 | Microsoft DWM Core Library 安全漏洞 — Windows 10 Version 1809 | 5.5 | Medium | 2025-06-10 |
| CVE-2025-29958 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows 10 Version 1507 | 6.5 | Medium | 2025-05-13 |
| CVE-2025-29830 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows 10 Version 1507 | 6.5 | Medium | 2025-05-13 |
| CVE-2025-29829 | Microsoft Windows 安全漏洞 — Windows 10 Version 1507 | 5.5 | Medium | 2025-05-13 |
| CVE-2025-29959 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows 10 Version 1507 | 6.5 | Medium | 2025-05-13 |
| CVE-2025-27474 | Microsoft Windows Routing and Remote Access Service 安全漏洞 — Windows Server 2008 R2 Service Pack 1 | 6.5 | Medium | 2025-04-08 |
| CVE-2023-37930 | Fortinet多款产品 安全漏洞 — FortiProxy | 6.7 | High | 2025-04-08 |
| CVE-2025-27810 | Mbed TLS 安全漏洞 — mbedtls | 5.4 | Medium | 2025-03-25 |
| CVE-2025-27796 | GraphicsMagick 安全漏洞 — GraphicsMagick | 4.5 | Medium | 2025-03-07 |
| CVE-2025-26803 | Phusion Passenger 安全漏洞 — Passenger | 5.3 | Medium | 2025-02-24 |
| CVE-2025-21312 | Microsoft Windows 安全漏洞 — Windows 10 Version 1507 | 2.4 | Low | 2025-01-14 |
| CVE-2025-21220 | Microsoft Message Queuing 安全漏洞 — Windows 10 Version 1507 | 7.5 | High | 2025-01-14 |
| CVE-2025-21357 | Microsoft Outlook 安全漏洞 — Microsoft 365 Apps for Enterprise | 6.7 | Medium | 2025-01-14 |
| CVE-2025-21288 | Microsoft Windows COM 安全漏洞 — Windows 10 Version 1507 | 6.5 | Medium | 2025-01-14 |
| CVE-2025-21272 | Microsoft Windows COM 安全漏洞 — Windows 10 Version 1507 | 6.5 | Medium | 2025-01-14 |
| CVE-2024-12085 | Rsync 缓冲区错误漏洞 | 7.5 | High | 2025-01-14 |
| CVE-2024-13164 | Ivanti EPM 安全漏洞 — Endpoint Manager | 7.8 | High | 2025-01-14 |
| CVE-2024-11991 | Motoko 安全漏洞 — Motoko | 5.6 | Medium | 2024-12-09 |
| CVE-2024-49029 | Microsoft Excel 安全漏洞 — Microsoft Office LTSC for Mac 2024 | 7.8 | High | 2024-11-12 |
| CVE-2024-8896 | Autodesk AutoCAD 安全漏洞 — AutoCAD | 7.8 | High | 2024-10-29 |
CWE-908（对未经初始化资源的使用） 是常见的弱点类别，本平台收录该类弱点关联的 197 条 CVE 漏洞。