← Back
CWE-908

962 CVEs • Abstraction: Base • Likelihood of Exploit: Medium

Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

JSON object

Loading...

CVEs (962)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security se...Show more
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Oct 9, 2026
Oct 6, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
1Google
1Chrome
Oct 7, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Oct 8, 2026
Oct 6, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
-
-
Oct 2, 2026
Oct 2, 2026
6.3 MEDIUM· v4
N/A· v3
N/A· v2
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, w...Show more
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.Show less
-
-
Oct 2, 2026
Oct 2, 2026
6.3 MEDIUM· v4
N/A· v3
N/A· v2
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which...Show more
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue.Show less
-
-
Oct 1, 2026
Sep 30, 2026
N/A· v4
7.8 HIGH· v3
N/A· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerabili...Show more
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering.Show less
-
-
Sep 30, 2026
Sep 30, 2026
N/A· v4
5.5 MEDIUM· v3
N/A· v2
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerab...Show more
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerability might lead to information disclosure.Show less
1Google
1Chrome
Sep 30, 2026
Sep 29, 2026
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Sep 30, 2026
Sep 29, 2026
N/A· v4
3.4 LOW· v3
N/A· v2
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security seve...Show more
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Sep 30, 2026
Sep 29, 2026
N/A· v4
3.4 LOW· v3
N/A· v2
Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromi...Show more
Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Sep 30, 2026
Sep 29, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
1Google
1Chrome
Sep 30, 2026
Sep 29, 2026
N/A· v4
3.4 LOW· v3
N/A· v2
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium...Show more
Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)Show less
1Google
1Chrome
Sep 30, 2026
Sep 29, 2026
N/A· v4
4.7 MEDIUM· v3
N/A· v2
Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)