CWE-457 · 249 records

Use of Uninitialized Variable

CVEs in this class

249 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2021-40418No exploit	When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property blackmagicdesign · davinci resolve · CWE-457 Pre-auth	Critical9.8	—	17.9%	Dec 22, 2021
39Monitor	CVE-2022-21217No exploit	An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_20121102.reolink · rlc-410w firmware · CWE-457 Pre-auth	Critical9.8	—	1.2%	Jan 28, 2022
39Monitor	CVE-2026-72020No exploit	ipvs: reset full ip_vs_seq structs in ip_vs_conn_newlinux · linux · CWE-457 Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-6748No exploit	Uninitialized memory in the Audio/Video: Web Codecs componentmozilla · firefox · CWE-457 Pre-auth	Critical9.8	—	0.5%	Apr 21, 2026
39Monitor	CVE-2022-40510No exploit	Buffer copy without checking size of input in Audio.qualcomm · apq8009 firmware · CWE-457 Pre-auth	Critical9.8	—	0.4%	Aug 8, 2023
39Monitor	CVE-2026-52931No exploit	batman-adv: tp_meter: avoid use of uninit sender varslinux · linux kernel · CWE-457 Pre-auth	Critical9.8	—	0.3%	Jun 24, 2026
38Monitor	CVE-2026-78935No exploit	Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute agoogle · chrome · CWE-457 pre-auth RCE	Critical9.6	—	0.5%	Aug 25, 2026
38Monitor	CVE-2026-14405No exploit	Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a cgoogle · chrome · CWE-457 pre-auth RCE	Critical9.6	—	0.5%	Jul 1, 2026
36Monitor	CVE-2026-84639No exploit	Uninitialized memory in MIME parsingmozilla · thunderbird · CWE-457 Pre-auth	Critical9.1	—	0.3%	Sep 1, 2026
35Monitor	CVE-2024-6990No exploit	Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds google · chrome · CWE-457 Pre-auth	High8.8	—	0.9%	Aug 1, 2024
35Monitor	CVE-2023-6324No exploit	ThroughTek Kalay SDK error in handling the PSK identitythroughtek · kalay platform · CWE-457	High8.8	—	0.7%	May 15, 2024
35Monitor	CVE-2026-15132No exploit	Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a google · chrome · CWE-457 pre-auth RCE	High8.8	—	0.4%	Jul 8, 2026
35Monitor	CVE-2026-94018No exploit	NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow patheclipse foundation · eclipse threadx - netx duo · CWE-457 Pre-auth	High8.8	—	0.3%	2 days ago
35Monitor	CVE-2026-13825No exploit	Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a cragoogle · chrome · CWE-457 Pre-auth	High8.8	—	0.3%	Jun 30, 2026
35Monitor	CVE-2026-92052No exploit	Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL componentmozilla · firefox · CWE-457 Pre-auth	High8.8	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-55280No exploit	In multiple locations, there is a possible out-of-bounds write due to uninitialized data.google · android · CWE-457	High8.8	—	0.2%	Oct 5, 2026
35Monitor	CVE-2025-5749No exploit	WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerabilitywolfbox · level 2 ev charger firmware · CWE-457 Pre-auth Auth bypass	High8.8	—	0.2%	Jun 6, 2025
35Monitor	CVE-2026-53374No exploit	drm/amdgpu: zero-initialize GART table on allocationlinux · linux kernel · CWE-457	High8.8	—	0.1%	Jul 19, 2026
34Monitor	CVE-2024-47540No exploit	GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxergstreamer · gstreamer · CWE-457	High8.6	—	1.0%	Dec 11, 2024
34Monitor	CVE-2020-27124No exploit	Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerabilitycisco · adaptive security appliance software · CWE-457 Pre-auth Denial of service	High8.6	—	0.9%	Nov 18, 2024
34Monitor	CVE-2025-20271No exploit	Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerabilitycisco · cisco meraki mx firmware · CWE-457 Pre-auth Denial of service	High8.6	—	0.5%	Jun 18, 2025
34Monitor	CVE-2026-66859No exploit	Apache Thrift: c_glib multiplexed processor crashes on a message it cannot routeapache software foundation · apache thrift · CWE-457 Pre-auth	High8.7	—	0.4%	Oct 2, 2026
34Monitor	CVE-2025-58071No exploit	BIG-IP IPSec vulnerabilityf5 · big-ip access policy manager · CWE-457 Pre-auth	High8.7	—	0.3%	Oct 15, 2025
34Monitor	CVE-2025-2286No exploit	Local Code Execution Vulnerability in Arena®rockwellautomation · arena · CWE-457 RCE	High8.5	—	0.3%	Apr 8, 2025
34Monitor	CVE-2025-2287No exploit	Local Code Execution Vulnerability in Arena®rockwellautomation · arena · CWE-457 RCE	High8.5	—	0.3%	Apr 8, 2025

CVE-2021-40418
44Plan
When parsing a file that is submitted to the DPDecoder service as a job, the R3D SDK will mistakenly skip over the assignment of a property
CriticalCVSS 9.8No exploitEPSS 17%
- Pre-auth
blackmagicdesign · davinci resolveDec 22, 2021
CVE-2022-21217
39Monitor
An out-of-bounds write vulnerability exists in the device TestEmail functionality of reolink RLC-410W v3.0.0.136_20121102.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
reolink · rlc-410w firmwareJan 28, 2022
CVE-2026-72020
39Monitor
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-6748
39Monitor
Uninitialized memory in the Audio/Video: Web Codecs component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxApr 21, 2026
CVE-2022-40510
39Monitor
Buffer copy without checking size of input in Audio.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
qualcomm · apq8009 firmwareAug 8, 2023
CVE-2026-52931
39Monitor
batman-adv: tp_meter: avoid use of uninit sender vars
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linux kernelJun 24, 2026
CVE-2026-78935
38Monitor
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute a
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chromeAug 25, 2026
CVE-2026-14405
38Monitor
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a c
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
google · chromeJul 1, 2026
CVE-2026-84639
36Monitor
Uninitialized memory in MIME parsing
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
mozilla · thunderbirdSep 1, 2026
CVE-2024-6990
35Monitor
Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chromeAug 1, 2024
CVE-2023-6324
35Monitor
ThroughTek Kalay SDK error in handling the PSK identity
HighCVSS 8.8No exploitEPSS 0%
throughtek · kalay platformMay 15, 2024
CVE-2026-15132
35Monitor
Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeJul 8, 2026
CVE-2026-94018
35Monitor
NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
eclipse foundation · eclipse threadx - netx duo2 days ago
CVE-2026-13825
35Monitor
Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a cra
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
google · chromeJun 30, 2026
CVE-2026-92052
35Monitor
Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
mozilla · firefoxSep 15, 2026
CVE-2026-55280
35Monitor
In multiple locations, there is a possible out-of-bounds write due to uninitialized data.
HighCVSS 8.8No exploitEPSS 0%
google · androidOct 5, 2026
CVE-2025-5749
35Monitor
WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
wolfbox · level 2 ev charger firmwareJun 6, 2025
CVE-2026-53374
35Monitor
drm/amdgpu: zero-initialize GART table on allocation
HighCVSS 8.8No exploitEPSS 0%
linux · linux kernelJul 19, 2026
CVE-2024-47540
34Monitor
GHSL-2024-197: GStreamer uses uninitialized stack memory in Matroska/WebM demuxer
HighCVSS 8.6No exploitEPSS 1%
gstreamer · gstreamerDec 11, 2024
CVE-2020-27124
34Monitor
Cisco Adaptive Security Appliance Software SSL/TLS Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · adaptive security appliance softwareNov 18, 2024
CVE-2025-20271
34Monitor
Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco meraki mx firmwareJun 18, 2025
CVE-2026-66859
34Monitor
Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
apache software foundation · apache thriftOct 2, 2026
CVE-2025-58071
34Monitor
BIG-IP IPSec vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
f5 · big-ip access policy managerOct 15, 2025
CVE-2025-2286
34Monitor
Local Code Execution Vulnerability in Arena®
HighCVSS 8.5No exploitEPSS 0%
- RCE
rockwellautomation · arenaApr 8, 2025
CVE-2025-2287
34Monitor
Local Code Execution Vulnerability in Arena®
HighCVSS 8.5No exploitEPSS 0%
- RCE
rockwellautomation · arenaApr 8, 2025

All vulnerability classes