Overview 1,084 matches · 1 in Waratek scope · 0 protected · 11 exploited · 4 CISA KEV · 11 public PoC · 5 EPSS ≥ 0.5
1,084matches
1in Waratek scope0.1%
0protected0.0%
11exploited1.0%
4CISA KEV0.4%
11public PoC1.0%
5EPSS ≥ 0.50.5%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
0.1%
Outside Waratek scope
9
0.8%
Not applicable
1,074
99.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
1,084
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 384 / year
20071
Not applicable1
High1
not blocked1
Forecast only1
20086
Not applicable6
Critical1
High5
not blocked6
Exploited1
No public exploit5
20094
Not applicable4
High4
not blocked4
Exploited1
Working exploit published1
No public exploit2
20106
Not applicable6
High6
not blocked6
No public exploit6
201112
Not applicable12
High12
not blocked12
Exploited1
No public exploit11
20121
Not applicable1
Critical1
not blocked1
No public exploit1
20130
20140
20153
Not applicable3
Critical1
High2
not blocked3
No public exploit3
20162
Not applicable2
Medium2
not blocked2
No public exploit2
20174
Not applicable4
High1
Medium3
not blocked4
Working exploit published1
No public exploit3
201821
Not applicable21
Critical2
High8
Medium10
Low1
not blocked21
Exploited2
No public exploit19
201975
Outside Waratek scope4
Not applicable71
Critical8
High15
Medium52
not blocked75
No public exploit75
202056
Outside Waratek scope3
Not applicable53
Critical4
High17
Medium33
Low2
not blocked56
Exploited1
Proof of concept only1
Forecast only1
No public exploit53
202172
Outside Waratek scope1
Not applicable71
Critical29
High22
Medium17
Low4
not blocked72
Proof of concept only1
No public exploit71
202247
No exploit published1
Not applicable46
Critical2
High19
Medium25
Low1
not blocked47
Proof of concept only4
No public exploit43
202344
Not applicable44
Critical2
High21
Medium21
not blocked44
Exploited1
Proof of concept only7
Forecast only1
No public exploit35
2024186
Outside Waratek scope1
Not applicable185
Critical7
High79
Medium91
Low9
not blocked186
Exploited2
Proof of concept only2
No public exploit182
2025160
Not applicable160
Critical12
High45
Medium102
Low1
not blocked160
Exploited1
Proof of concept only2
No public exploit157
2026384
Not applicable384
Critical10
High94
Medium247
Low33
not blocked384
Exploited1
Proof of concept only19
No public exploit364
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-113332 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113324 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113322 | Medium | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in Dawn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113315 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113304 | Medium | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113285 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113267 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in Video in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113252 | Critical | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113242 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113234 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113210 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113200 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113188 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-113157 | Medium | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113143 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113140 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-113123 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-113031 | High | 2026-10-20 | Not applicable | No public exploit | Uninitialized resource in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-112897 | High | 2026-10-19 | Not applicable | Proof of concept only | Pillow is a Python imaging library. From 5.3.0 until 13.0.0, Pillow can return uninitialized memory as pixels when libtiff performs a short decode of JPEG-compressed or Group 4 fax TIFF data. The _decodeStrip and _decodeTile buffers can be larger than the bytes written by libtiff, but Pillow converts the expected rows without clearing the unwritten tail. The tile path is affected from 5.3.0 and the strip path from 6.0.0. An attacker can supply a crafted TIFF to an application that loads and returns or re-encodes its pixels. This can disclose stale heap contents without memory corruption or a process crash. This issue is fixed in version 13.0.0. |
| CVE-2026-97629 | High | 2026-10-14 | Not applicable | No public exploit | Description When NGINX Plus or NGINX Open Source is configured with ssl_session_cache shared:name:size without an explicit ssl_session_ticket_key file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-deterministic manner that is beyond the attacker's control. An attacker could leverage this vulnerability to bypass verification of client certificates. Impact This vulnerability can lead to the exposure of resources or functionality to unintended actors, possibly providing attackers with access to sensitive information. There is no control plane exposure; this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2026-109438 | Medium | 2026-10-14 | Not applicable | No public exploit | 3proxy from 0.9.7 through 1.0.1, fixed in commit 206c923, contains an uninitialized stack memory disclosure vulnerability that allows unauthenticated attackers to leak stack bytes via the SOCKS4 reply path when the external-NAT option (-Ne) is configured. Attackers can send a client probe that fails the SOCKS version check to trigger a reply containing uninitialized bytes from the sin structure, exposing high bytes of a userspace pointer that weakens ASLR protections. |
| CVE-2026-104086 | Medium | 2026-10-14 | Not applicable | No public exploit | 7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s no_ids field is set so that the final metadata block’s expected size is miscomputed and bypasses the size validation check. By listing or extracting the crafted archive, attackers can cause the application to return uninitialized heap memory as the kpidUserId and kpidGroupId properties, exposing potentially sensitive process memory contents to the user. |
| CVE-2026-97011 | High | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. |
| CVE-2026-96850 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Modern Device Management (MDM) allows an authorized attacker to disclose information locally. |
| CVE-2026-96849 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
| CVE-2026-96247 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally. |
| CVE-2026-96206 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Subsystem for Linux allows an authorized attacker to disclose information locally. |
| CVE-2026-88150 | High | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to execute code over a network. |
| CVE-2026-85843 | High | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally. |
| CVE-2026-85322 | High | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-85320 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally. |
| CVE-2026-83925 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-83755 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally. |
| CVE-2026-83723 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83714 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally. |
| CVE-2026-83695 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally. |
| CVE-2026-83669 | High | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. |
| CVE-2026-83515 | High | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in RPC Runtime allows an unauthorized attacker to disclose information over a network. |
| CVE-2026-70293 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70284 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally. |
| CVE-2026-70090 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Netlogon allows an authorized attacker to disclose information locally. |
| CVE-2026-109745 | Critical | 2026-10-13 | Not applicable | No public exploit | Sandbox escape due to uninitialized memory in the DOM: Web Serial component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-109712 | High | 2026-10-13 | Not applicable | No public exploit | Sandbox escape due to uninitialized memory in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
| CVE-2026-105731 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally. |
| CVE-2026-102187 | Medium | 2026-10-13 | Not applicable | No public exploit | Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally. |
| CVE-2026-109273 | Medium | 2026-10-12 | Not applicable | No public exploit | ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an information disclosure vulnerability in the PostScript decoder, which allocates a buffer one byte longer than the data it decoded. Attackers can supply a crafted PostScript file to expose a single uninitialized byte of memory contents. |
| CVE-2026-109242 | High | 2026-10-12 | Not applicable | Proof of concept only | FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 renders uninitialized heap memory from un-decoded progressive tiles because the tile->current buffer is allocated without zeroing. A malicious RDP server can send a crafted WBT_TILE_FIRST then WBT_TILE_UPGRADE sequence to paint heap bytes onscreen or abort the client process. |
| CVE-2026-107676 | Medium | 2026-10-08 | Not applicable | No public exploit | FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av_dynamic_hdr_plus_to_t35() that leaves up to three payload bytes uninitialized when tone_mapping_flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcoding writes leaked process memory into output files. |
| CVE-2026-104074 | Medium | 2026-10-07 | Not applicable | No public exploit | Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stun_init_error_response_common_str() function in src/client/ns_turn_msg.c, which fails to zero-initialize the avalue buffer before computing its length with strlen() and copying leaked stack bytes into the ERROR-CODE reason phrase, exposing pointer fragments that weaken ASLR and enable precise version fingerprinting. |
| CVE-2026-106395 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106386 | Medium | 2026-10-06 | Not applicable | Proof of concept only | Uninitialized resource in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106379 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in Skia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106376 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106370 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106290 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106275 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low) |
| CVE-2026-106273 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106261 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106258 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106245 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106231 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106223 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-106215 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106202 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-106184 | Medium | 2026-10-06 | Not applicable | No public exploit | Uninitialized resource in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-92834 | Medium | 2026-10-02 | Not applicable | No public exploit | Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue. |
| CVE-2026-85483 | Medium | 2026-10-02 | Not applicable | No public exploit | Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift c_glib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue. |
| CVE-2026-47600 | High | 2026-09-30 | Not applicable | No public exploit | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an error-handling path could operate on an improperly initialized resource. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, denial of service, information disclosure, and data tampering. |
| CVE-2026-47555 | Medium | 2026-09-30 | Not applicable | No public exploit | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause uninitialized kernel memory to be copied back to userspace. A successful exploit of this vulnerability might lead to information disclosure. |
| CVE-2026-95359 | Low | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-95324 | Low | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-95293 | Medium | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102635 | Medium | 2026-09-29 | Not applicable | No public exploit | ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap memory disclosure in the GIF decoder's application extension handler in coders/gif.c. Attackers can craft malicious GIF files that cause the number parser to read uninitialized heap memory and store contents as image metadata, disclosing sensitive heap information. |
| CVE-2026-102325 | Medium | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102319 | Low | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102315 | Low | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102313 | Medium | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102311 | Low | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102307 | Medium | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102303 | Medium | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-102300 | Medium | 2026-09-29 | Not applicable | No public exploit | Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-98089 | Medium | 2026-09-25 | Not applicable | No public exploit | In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd() alb_determine_nd() uses icmp6_hdr(skb) to inspect ICMPv6 headers. However, in xmit paths (e.g. packets sent via AF_PACKET / raw sockets or forwarded packets), skb->transport_header is not guaranteed to be initialized. While pskb_network_may_pull() ensures the packet data is linear starting from the network header, it does not set or adjust the transport header offset. Dereferencing icmp6_hdr(skb) can therefore access out-of-bounds memory. Fetch the icmp6hdr directly after ipv6hdr following pskb_network_may_pull(), and reload ipv6hdr in case pskb_may_pull() reallocated skb->head. Also remove the unused bond argument from alb_determine_nd(). |
| CVE-2026-94056 | High | 2026-09-19 | Not applicable | No public exploit | Exim before 4.100.1, when Proxy-Protocol is used with an attacker-controlled proxy, allows attackers to read certain uninitialized data from stack memory. |
| CVE-2026-93018 | Medium | 2026-09-18 | Not applicable | No public exploit | Imager versions before 1.036 for Perl disclose uninitialised heap memory reading a paletted image with pixel indexes past its colour map in i_gpix_p and i_glin_p. The palette is allocated uninitialised, and only the entries a reader adds count as populated. The TGA reader stores pixel indexes without checking them against the colour map. i_gpix_p() rejects only an index greater than the count, so an index equal to it reads the first unpopulated entry, and getpixel() returns it. i_glin_p() skips any index at or beyond the count without writing that pixel to the caller's buffer. The palette-to-RGB conversion reads each row through an uninitialised buffer, so those pixels of the converted image hold prior heap contents. Reading an attacker-supplied image through Imager->read() and then fetching its pixels or converting it to RGB discloses process heap memory. |
| CVE-2026-54634 | High | 2026-09-17 | Not applicable | No public exploit | Hamlib is a ham radio control library for radios, rotators, and amplifiers. Prior to 4.7.2, the unauthenticated rigctld send_raw command on TCP port 4532 reaches rigctl_send_raw() in tests/rigctl_parse.c, which writes a NUL byte at buf[buf_len + 1] outside its 200-byte stack buffer, and rig_send_raw() in src/rig.c, which copies reply_len - 1 bytes instead of the actual nbytes received. A remote client can send the CR terminator with a short payload to trigger both flaws in one command under the default no-password configuration. The out-of-bounds write can crash the daemon or corrupt adjacent stack memory, while the oversized copy can return up to 198 bytes of uninitialized stack data to the client. This issue is fixed in version 4.7.2. |
| CVE-2026-54604 | Medium | 2026-09-17 | Not applicable | No public exploit | OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and _openslide_tiff_read_tile() to request a full-height destination for a partial bottom tile row, allowing uninitialized heap memory to enter pixel data returned by openslide_read_region(). A crafted but valid slide can trigger the issue in TIFF-based formats other than Hamamatsu NDPI when a network service renders attacker-provided slides. Successful extraction depends on pixel transparency handling and recompression, OpenSlide with libtiff 4.7.0 or earlier is not affected, and official binary builds 4.0.0.10 and 4.0.0.11 are affected. This issue is fixed in OpenSlide 4.0.1 and official binary build 4.0.0.12. |
| CVE-2026-91946 | High | 2026-09-15 | Not applicable | Proof of concept only | FreeRDP versions before 3.31.0 contain an information disclosure vulnerability in the RDPGFX server's ResetGraphics PDU serializer that fails to initialize padding bytes in the fixed 340-byte wire format. Attackers can receive uninitialized heap memory including live pointers and GLib function addresses transmitted in the PDU, defeating heap ASLR and disclosing the GLib module base address. |
| CVE-2026-91740 | Medium | 2026-09-15 | Not applicable | No public exploit | Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-91720 | Medium | 2026-09-15 | Not applicable | No public exploit | Uninitialized resource in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-84622 | Medium | 2026-09-14 | Not applicable | No public exploit | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app with root privileges may be able to read uninitialized kernel memory. |
| CVE-2026-15710 | Medium | 2026-09-11 | Not applicable | No public exploit | An information leakage vulnerability exists in the Endpoint DLP component (epdlpdrv.sys) of Netskope Client for Windows prior to version R141. An internal communication channel used by the user-space hook DLL to pass messages through the kernel driver to the daemon lacked proper token-based message validation, allowing local unprivileged processes to send unauthorized queries. Additionally, a reply buffer used by the port message handler was not properly initialized before returning data, leaking residual kernel pool memory from prior allocations. A local unprivileged attacker could exploit this vulnerability to enumerate DLP configuration and feature flags, extract live session tokens, and read kernel memory fragments from other users' operations. |
| CVE-2026-87647 | Low | 2026-09-09 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| CVE-2026-87642 | Medium | 2026-09-09 | Not applicable | No public exploit | Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-87576 | Low | 2026-09-09 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-87555 | Medium | 2026-09-09 | Not applicable | No public exploit | Uninitialized resource in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-87497 | Medium | 2026-09-09 | Not applicable | No public exploit | Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-87456 | Low | 2026-09-09 | Not applicable | No public exploit | Uninitialized resource in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
| CVE-2026-85880 | High | 2026-09-08 | Not applicable | Exploited | Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally. |
| CVE-2026-81958 | Medium | 2026-09-08 | Not applicable | No public exploit | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |
| CVE-2026-81391 | Medium | 2026-09-08 | Not applicable | No public exploit | Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. |