CVE Database

CVE-2026-13970 Medium · 5.3 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Media in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13969 Medium · 5.3 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13958 Medium · 6.5 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Codecs in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13950 Medium · 5.3 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13947 Medium · 5.3 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in XR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13943 Medium · 6.5 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in CSS in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13940 Medium · 6.5 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Cast in Google Chrome prior to 150.0.7871.47 allowed an attacker on the local network segment to obtain potentially sensitive information from process memory via malicious network traffic. (Chromium security severity: Medium)

CVE-2026-13923 Medium · 6.5 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-13833 Medium · 6.5 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13825 High · 8.8 CWE-457 Jun 30, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Dawn in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13030 Medium · 5.3 CWE-457 Jun 24, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-13023 Medium · 5.3 CWE-457 Jun 24, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in GPU in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-52931 Critical · 9.8 CWE-457 Jun 24, 2026

Linux kernel batman-adv tp_meter uninitialized sender state flaw

In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid use of uninit sender vars batadv_tp_recv_ack() and batadv_tp_stop() are only valid for tp_vars in the BATADV_TP_SENDER role. When called with a BATADV_TP_RECEIVER role, it proceeds to read sender-only members that were never initialized, leading to undefined behavior. This can be triggered when a node that is currently acting as a receiver in an ongoing tp_meter session receives a malicious ACK packet. Guard against this by checking tp_vars->role immediately after the lookup and bailing out if it is not BATADV_TP_SENDER, before any of those members are accessed.

CVE-2026-12469 Medium · 4.3 CWE-457 Jun 17, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in GPU in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9754 Medium · 6.5 CWE-457 Jun 9, 2026

Stack memory disclosure in filemd5 command

An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

CVE-2026-11696 Medium · 5.3 CWE-457 Jun 8, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Video in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

CVE-2026-11668 Medium · 4.3 CWE-457 Jun 8, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium security severity: High)

CVE-2026-11268 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

CVE-2026-11159 Medium · 4.3 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Skia in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11141 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in Audio in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11138 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11137 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11123 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11110 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVE-2026-11109 Medium · 6.5 CWE-457 Jun 4, 2026

Use of Uninitialized Variable in Google Chrome

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)