CWE-908: Use of Uninitialized Resource
The product uses or accesses a resource that has not been initialized.
246 tracked CVEs are classified under this weakness.
Highest-risk vulnerabilities
- CVE-2026-24826 — Out-of-bounds write in turso3d
- CVE-2026-34543 — OpenEXR: Heap information disclosure in PXR24 decompression via unchecked decompressed size (undo_pxr24_impl)
- CVE-2025-59964 — Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart
- CVE-2025-31649 — Dell ControlVault3 ControlVault WBDI Driver hard-coded password vulnerability
- CVE-2025-31361 — Dell ControlVault3 ControlVault WBDI Driver Broadcom Storage Adapter privilege escalation vulnerability
- CVE-2026-78977 — Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potenti
- CVE-2026-78969 — Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside
- CVE-2026-79285 — Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtai
- CVE-2026-79270 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside
- CVE-2026-79229 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised th
- CVE-2026-79221 — Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read mem
- CVE-2026-79120 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain
- CVE-2026-78914 — Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read mem
- CVE-2025-40829 — A vulnerability has been identified in Simcenter Femap (All versions < V2512). The affected applications contains an uni
- CVE-2024-1848 — Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024
- CVE-2024-1847 — Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024
- CVE-2024-13164 — An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security
- CVE-2024-23314 — BIG-IP HTTP/2 vulnerability
- CVE-2026-84326 — Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code
- CVE-2026-60005 — NGINX ngx_http_slice_module vulnerability
Recently published
- CVE-2026-87555 — Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read me
- CVE-2026-87576 — Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had co
- CVE-2026-87497 — Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside
- CVE-2026-87642 — Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin d
- CVE-2026-87456 — Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised th
- CVE-2026-87647 — Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the
- CVE-2026-85089 — FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory
- CVE-2026-84326 — Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code
- CVE-2026-84267 — Gvfs: sftp: uninitialized heap disclosure in read_string()
- CVE-2026-78914 — Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read mem
- CVE-2026-79040 — Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to read me
- CVE-2026-78977 — Uninitialized resource in GPU in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to potenti
- CVE-2026-78984 — Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the
- CVE-2026-79221 — Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read mem
- CVE-2026-78962 — Uninitialized resource in WebXR in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engi
- CVE-2026-79269 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass
- CVE-2026-79229 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised th
- CVE-2026-79285 — Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtai
- CVE-2026-79270 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory outside
- CVE-2026-79120 — Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain
More specific weaknesses
- CWE-457 — Use of Uninitialized Variable