16080 matches found
EUVD-2026-47572
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-63959
A flaw was found in the Linux kernel's USB Type-C Universal Serial Bus Type-C subsystem. A malicious or broken USB-C port can transmit a specially crafted data frame that advertises more data objects than it actually contains. This can lead to the system reading from uninitialized memory,...
CVE-2026-63954
A flaw was found in the Linux kernel's High Performance File System HPFS component. This vulnerability occurs when the hpfsmapdnodebitmap function fails, leading to the system attempting to release an uninitialized buffer. An attacker could potentially trigger this condition, resulting in a syste...
CVE-2026-16417
Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-16417
CVE-2026-16417 involves an uninitialized use in Skia used by Google Chrome prior to 150.0.7871.182. A remote attacker who already compromised the renderer can leak cross-origin data through a crafted HTML page. The vulnerability affects Chrome with Skia in the referenced range; remediation is to ...
CVE-2026-63942
A flaw was found in the Linux kernel's parallel port parport subsystem. This vulnerability is caused by a race condition where parallel port devices are registered before they are fully initialized. This allows client drivers to interact with uninitialized or unstable ports, which can lead to a...
CVE-2026-47247 libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in decoded grid images. An attacker who uploads a crafted AVIF/HEIC file to any server-side image processor WordPress, Sharp/libvips,...
CVE-2026-63895
A flaw was found in the Linux kernel's FunctionFS ffs driver. This vulnerability allows a privileged gadget daemon to receive uninitialized kernel memory slab residue due to incorrect handling of short USB control-OUT transfers. When ffsep0read processes a short control-OUT transfer, it copies mo...
CVE-2026-63870
A flaw was found in the Linux kernel's 6LoWPAN IPv6 over Low-Power Wireless Personal Area Networks module. When a non-IPv6 packet is transmitted over a 6LoWPAN interface, the system attempts to process uninitialized data. This can lead to system instability or a denial of service, making the syst...
CVE-2026-63857
A flaw was found in the Linux kernel's airoha network driver. The transmit function airohadevxmit attempts to read uninitialized memory during its final processing loop. This unsafe memory access may lead to a system crash, resulting in a Denial of Service DoS...
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response
A flaw was found in glibc GNU C Library. The deprecated functions nsprintrrf, nsprintrr, and fpnquery do not properly validate the length of RDATA Resource Record Data in a DNS Domain Name System response when processing specific record types like LOC, CERT, TKEY, or TSIG. A remote attacker could...
CVE-2026-16384
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...
CVE-2026-16385
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...
CVE-2026-16386
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...
EUVD-2026-46223
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...
CVE-2026-16386
CVE-2026-16386 affects the Graphics: WebGPU component. The issue is information disclosure caused by uninitialized memory. Mozilla advisories indicate the vulnerability was fixed in Firefox 153. No exploit details are provided in the supplied documents; remediation is the Firefox 153 update. Moni...
CVE-2026-16386
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...
CVE-2026-16385
The CVE-2026-16385 entry concerns an information disclosure in the Graphics: WebGPU component. The underlying issue is uninitialized memory leading to disclosure. A fix was applied in Firefox 153. Affected context beyond Firefox isn’t specified in the provided documents. Connected sources corrobo...
CVE-2026-16385
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...
EUVD-2026-46222
Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153...