CWE-457

127 vulnerabilities with CWE-457

CVE-2026-6751 HIGH

Uninitialized memory in the Audio/Video: Web Codecs component

CVSS 7.3

CVE-2026-6748 CRITICAL

Uninitialized memory in the Audio/Video: Web Codecs component

CVSS 9.8

CVE-2026-6311 HIGH

Google Chrome <147.0.7727.101 - Uninitialized Use

CVSS 8.3

CVE-2026-5888 MEDIUM

Google Chrome <147.0.7727.55 - Info Disclosure

CVSS 6.5

CVE-2026-34608 MEDIUM

nanomq: Heap-Buffer-Overflow in webhook_inproc.c via cJSON_Parse OOB Read

CVSS 4.9

CVE-2026-4147 MEDIUM

MongoDB Server < 8.2.6 - Stack Memory Disclosure via filemd5

CVSS 6.5

CVE-2026-20051 HIGH

Cisco Nexus 3600/9500-R - DoS

CVSS 7.4

CVE-2026-2806 CRITICAL

Firefox <148 - Memory Corruption

CVSS 9.1

CVE-2026-1333 HIGH

SOLIDWORKS Desktop <2026 - Code Injection

CVSS 7.8

CVE-2026-21690 MEDIUM

iccDEV <2.3.1.2 - Type Confusion

CVSS 6.3

CVE-2026-22188 MEDIUM

CMU Panda3d < 1.10.16 - Use of Uninitialized Resource

CVSS 5.5

CVE-2025-13763 MEDIUM

Libopensc: opensc: multiple uses of uninitialized variable

CVSS 5.7

CVE-2025-58466 MEDIUM

QNAP OS - Use After Free

CVSS 4.9

CVE-2025-29952 MEDIUM

AMD SEV - Memory Corruption

CVE-2025-32467 MEDIUM

TDX Module <tdx1.5 - Info Disclosure

CVSS 4.1

CVE-2025-47348 HIGH

Qualcomm Trusted Application Firmware - Memory Corruption

CVSS 7.8

CVE-2025-20784 MEDIUM

Display < - Memory Corruption

CVSS 6.7

CVE-2025-10021 HIGH

Open Design Alliance Drawings SDK (mt) <2026.12 - Use After Free

CVE-2025-36935 HIGH

Google Android - Out-of-Bounds Write

CVSS 7.8

CVE-2025-65295 HIGH

Aqara Hub <4.1.9_0027-4.3.6_0025 - RCE

CVSS 8.1

CVE-2025-20771 MEDIUM

Google Android Improper Input Validation - Privilege Escalation

CVSS 6.7

CVE-2025-20766 HIGH

Display < - Memory Corruption

CVSS 7.8

CVE-2025-64181 HIGH

Openexr < 3.3.6 - Denial of Service

CVSS 7.5

CVE-2025-58071 HIGH

BIG-IP - DoS

CVSS 7.5

CVE-2025-7984 HIGH

Ashlar Cobalt - Remote Code Execution

CVSS 7.8