Base de CVEs

CVE-2026-13958 Média · 6.5 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13950 Média · 5.3 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13947 Média · 5.3 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in XR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13943 Média · 6.5 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13940 Média · 6.5 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13923 Média · 6.5 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13833 Média · 6.5 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13825 Alta · 8.8 CWE-457 30/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13030 Média · 5.3 CWE-457 24/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13023 Média · 5.3 CWE-457 24/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-52931 Crítica · 9.8 CWE-457 24/06/2026

Kernel Linux batman-adv tp_meter: estado de remetente não inicializado

No kernel Linux, a seguinte vulnerabilidade foi resolvida: batman-adv: tp_meter: evita o uso de variáveis do remetente não inicializadas batadv_tp_recv_ack() e batadv_tp_stop() só são válidas para tp_vars no papel de REMETENTE (BATADV_TP_SENDER). Quando chamadas com o papel de RECEPTOR (BATADV_TP_RECEIVER), elas leem membros exclusivos do remetente que nunca foram inicializados, o que leva a comportamento indefinido. Isso pode ser acionado quando um nó que atua como receptor em uma sessão tp_meter em andamento recebe um pacote ACK malicioso. Para evitar isso, verifica-se tp_vars->role imediatamente após a busca e encerra-se a execução caso o papel não seja BATADV_TP_SENDER, antes que qualquer um desses membros seja acessado.

CVE-2026-12469 Média · 4.3 CWE-457 17/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9754 Média · 6.5 CWE-457 09/06/2026

Stack memory disclosure in filemd5 command

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

CVE-2026-11696 Média · 5.3 CWE-457 08/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11668 Média · 4.3 CWE-457 08/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium security severity: High)

CVE-2026-11268 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11159 Média · 4.3 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11141 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11138 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11137 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11123 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11110 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11109 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11104 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11101 Média · 6.5 CWE-457 04/06/2026

Use of Uninitialized Variable em Google Chrome

Uninitialized Use in Dawn in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)