CWE-457

CWE-457 · 6 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-457, highest CVSS first.

  1. MEDIUM 4.7CVE-2026-953322026-09-29

    Use of uninitialized variable in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

    AI risk analysis on Exploit-DB.ai →

  2. MEDIUM 4.3CVE-2026-1008062026-09-29

    Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

    AI risk analysis on Exploit-DB.ai →

  3. MEDIUM 4.3CVE-2026-1008022026-09-29

    Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 4.3CVE-2026-1007992026-09-29

    Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 157.

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 4.3CVE-2026-1007832026-09-29

    Uninitialized memory in the Audio/Video component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

    AI risk analysis on Exploit-DB.ai →

  6. LOW 3.2CVE-2026-194922026-09-24

    IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hyper…

    AI risk analysis on Exploit-DB.ai →