Improper Initialization

Overview dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Improper Initialization in the DOMPurify.setConfig API when an uponSanitizeAttribute hook is registered that mutates allowedAttributes. An attacker can cause persistent...

Improper Initialization

Overview org.webjars.npm:dompurify is a DOM-only XSS sanitizer for HTML, MathML and SVG. Affected versions of this package are vulnerable to Improper Initialization in the DOMPurify.setConfig API when an uponSanitizeAttribute hook is registered that mutates allowedAttributes. An attacker can caus...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. Google Chrome has a security vulnerability that stems from the improper initialization of Video...

CVE-2026-24085

Memory Corruption when processing display command line information due to improper initialization of a variable...

CVE-2026-24085

Memory Corruption when processing display command line information due to improper initialization of a variable...

CVE-2026-24085 Stack-based Buffer Overflow in Display

Memory Corruption when processing display command line information due to improper initialization of a variable...

CVE-2026-24085

Technical details about CVE-2026-24085 are not publicly available in the provided documents; the memory corruption description is noted but no affected products, affected versions, root cause specifics, or fixes are disclosed. Monitor for updates.

PT-2026-45641

Memory Corruption when processing display command line information due to improper initialization of a variable...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. There is a security vulnerability in Qualcomm Chipsets, which stems from improper variable initialization. This vulnerability may lead to memory corruption when processing command-line information...

Intel Xeon Scalable Processors 安全漏洞

Intel Xeon Scalable Processors are scalable server central processing units CPUs developed by the American company Intel. There are security vulnerabilities in Intel Xeon Scalable Processors, which stem from improper initialization and may lead to information leakage...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper initialization of certain local variables during replay requests, potentially leading to...

The vulnerability of the cdev_device_add() function in the fs/char_dev.c file of the Linux kernel file system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cdevdeviceadd function in the fs/chardev.c file of the Linux kernel file system is related to improper initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-31689

A flaw was found in the EDAC/mc module of the Linux kernel. An error in the ordering of operations within the edacmcalloc function can lead to a situation where a device's release function is called before the device is fully initialized. This improper initialization can result in a kernel warnin...

AZL-84404 CVE-2026-31689 affecting package kernel for versions less than 6.6.137.1-1

In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fix error path ordering in edacmcalloc When the mci-pvtinfo allocation in edacmcalloc fails, the error path will call putdevice which will end up calling the device's release function. However, the init ordering is wrong...

The vulnerabilities of the functions xp_init_dma_info() and xp_dma_map() in the net/xdp/xsk_buff_pool.c module of the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerabilities of the functions xpinitdmainfo and xpdmamap in the net/xdp/xskbuffpool.c module of the Linux kernel are related to improper initialization. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the user_mem_abort() function in the arch/arm64/kvm/mmu.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the usermemabort function in the arch/arm64/kvm/mmu.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-57835

An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 9110, W920, W930, W1000, Modem 5123, Modem 5300, and Modem 5400. Improper memory initialization results in an illegal memory...

The vulnerability of the tt_add_tz_work_fn() function in the drivers/thermal/testing/zone.c module of the Linux kernel temperature control driver allows a hacker to cause a service failure.

The vulnerability of the ttaddtzworkfn function in the drivers/thermal/testing/zone.c module of the Linux kernel temperature control driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfqnl_build_packet_message() function in the net/netfilter/nfnetlink_queue.c module of the netfilter component of the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the nfqnlbuildpacketmessage function in the net/netfilter/nfnetlinkqueue.c module of the netfilter component of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the blkcg_css_online() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the blkcgcssonline function in the block/blk-cgroup.c module, which supports the block-level kernel in Linux, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...