#cwe-457

共收录 154 条相关情报。

← 返回所有主题
漏洞预警2026-09-29 发布INFO

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100783

Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additi...

CVE-2026-58731

In multiple functions of physmem_extmem_linux.c, there is a possible out-of-bounds read due to uninitialized data. This

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileg...

CVE-2026-58721

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to lo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirection channel. A malicious RDP server can induce failing USB...

CVE-2026-91963

FreeRDP versions before 3.31.0 contain an uninitialized heap memory disclosure vulnerability in the urbdrc USB redirecti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force the RAKP Message 1 handler to return before it overwrites t...

CVE-2026-16141

OpenBMC's IPMI implementation, phosphor-net-ipmid, contains a logic flaw in which an unauthenticated client can force th

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-15 发布INFO

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.

CVE-2026-92052

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component. This vulnerability was fixed in

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-14 发布INFO

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Seq...

CVE-2026-65405

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布INFO

A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>

CVE-2026-84391

A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-01 发布INFO

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunde...

CVE-2026-84639

Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via...

CVE-2026-78935

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion picture industry. In versions 3.3.0 through 3.3.12 and 3.4.0 t...

CVE-2026-62986

OpenEXR is the reference implementation and specification for the EXR image file format, widely used in the motion pictu

历史摘要 · 未重新核验 · NVD

安全公告2026-08-20 发布INFO

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76919

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-19 发布INFO

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

CVE-2026-76919

ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to...

CVE-2026-17077

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitializ

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-13 发布INFO

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable.

CVE-2026-17077

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitializ

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-07 发布INFO

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trade Conve...

CVE-2026-19212

A vulnerability was determined in WonderTrader up to 0.9.9. This impacts an unknown function of the file src/Includes/WT

历史摘要 · 未重新核验 · NVD

安全公告2026-08-07 发布INFO

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...

CVE-2026-19146

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromis

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...

CVE-2026-19160

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-08-07 发布INFO

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...

CVE-2026-19161

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-06 发布INFO

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTM...

CVE-2026-19161

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the ren

历史摘要 · 未重新核验 · NVD