← Back
CWE-457

280 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

JSON object

Loading...

CVEs (280)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jul 23, 2026
Jun 9, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium security severity: High)
1Google
1Chrome
Jul 23, 2026
Jun 5, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML pag...Show more
Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML pag...Show more
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML pag...Show more
Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium...Show more
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page...Show more
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Me...Show more
Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)