CWE-457

CVEs per yearBy the year they were published

1. 20091
2. 20111
3. 20193
4. 20215
5. 202210
6. 202311
7. 202444
8. 202537
9. 2026181

Newest CVEs

• CVE-2026-85068

  NUT blazer_usb ippon_command stack info-leak via unzeroed char tmp[64] in OUT-direction usb_control_msg

  networkupstools · nut

  Low2.4
• CVE-2026-54913

  WebAssembly Micro Runtime: Missing `ref.null` heap-type validation in `load_init_expr` leaks host stack memory to the WebAssembly guest

  bytecodealliance · wasm-micro-runtime

  Medium6.9
• CVE-2026-118448

  Uninitialized output buffer returned after nd_to_text failure in pybddisasm

  Bitdefender · pybddisasm

  Medium6.9
• CVE-2026-118447

  Uninitialized INSTRUX contents returned after decoding failure in pybddisasm

  Bitdefender · pybddisasm

  Medium4.8
• CVE-2026-120061

  psqlODBC ODBC escape parser stack buffer overflow

  PostgreSQL · psqlODBC

  High7.5
• CVE-2026-120246

  FFmpeg 4.4 through 9.0.2 Uninitialized Memory Disclosure via CDXL HAM Decoder

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-120243

  FFmpeg 2.0 through 9.0.2 Information Disclosure via G2M Kempf Palette

  FFmpeg · FFmpeg

  Medium6.8
• CVE-2026-117952

  Uninitialized memory in the Networking component

  Mozilla · Firefox

  High8.1
• CVE-2026-117888

  Uninitialized memory in the Graphics: Canvas2D component

  Mozilla · Firefox

  Medium5.4
• CVE-2026-113100

  Use of uninitialized variable in Audio in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a…

  Google · Chrome

  High8.8

Vendors it comes up for most

1. Google110
2. Linux17
3. Mozilla15
4. Red Hat10
5. Autodesk7
6. Bentley7
7. PDF-XChange7
8. Dassault Systèmes6
9. Ashlar-Vellum5
10. Cisco4