← Back
CWE-457

205 CVEs • Abstraction: Variant • Likelihood of Exploit: High

Use of Uninitialized Variable

The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

JSON object

Loading...

CVEs (205)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML pag...Show more
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML pag...Show more
Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium...Show more
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Race in GPU in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page...Show more
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 23, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Me...Show more
Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)Show less
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
7.4 HIGH· v3
N/A· v2
Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Jul 22, 2026
Jun 4, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security s...Show more
Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)Show less
1Libxls Project
1Libxls
Jul 22, 2026
Jun 3, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not fully initialized before...Show more
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table (MSAT) in read_MSAT() is not fully initialized before being consumed by ole2_validate_sector_chain(), which may result in application crashes or potential information disclosure when processing a crafted XLS fileShow less