Vulnerability index

Browse CVEs

18 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Use of Uninitialized ResourceCWE-908 × clear
Firefox HIGH 7.5
CVE-2026-16384

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $1,950 2026-07-21
Firefox HIGH 7.5
CVE-2026-16385

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $1,950 2026-07-21
Firefox HIGH 7.5
CVE-2026-16386

Information disclosure due to uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Fix: 153.0 / 153.0.0+
Fix from $1,950 2026-07-21
Firefox HIGH 7.5
CVE-2026-6749

Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.…

Fix: 115.35.0 / 140.10.0+
Fix from $1,950 2026-04-21
Firefox CRITICAL 9.1
CVE-2026-4715

Uninitialized memory in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunde…

Fix: 140.9.0 / 149.0+
Fix from $2,300 2026-03-24
Firefox CRITICAL 9.1
CVE-2026-4716

Incorrect boundary conditions, uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 149, Firefox ESR 140.…

Fix: 140.9.0 / 149.0+
Fix from $2,300 2026-03-24
Firefox CRITICAL 9.1
CVE-2026-2806

Uninitialized memory in the Graphics: Text component. This vulnerability was fixed in Firefox 148 and Thunderbird 148.

Fix: 148.0+
Fix from $2,300 2026-02-24
Firefox HIGH 7.5
CVE-2026-2794

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android. This vulnerability was fixed in Firefox 148.

Fix: 148.0+
Fix from $1,950 2026-02-24
Firefox CRITICAL 9.8
CVE-2025-1942

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vuln…

Fix: 136.0+
Fix from $2,300 2025-03-04
Firefox MEDIUM 6.5
CVE-2024-7526

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. Th…

Fix: 115.14.0 / 129.0+
Fix from $1,600 2024-08-06
Firefox MEDIUM 5.3
CVE-2024-3862

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulner…

Fix: 125.0+
Fix from $1,600 2024-04-16
Firefox HIGH 8.8
CVE-2023-32213

When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and T…

Fix: 102.11 / 113.0+
Fix from $1,950 2023-06-02
Firefox HIGH 8.8
CVE-2022-31741

A crafted CMS message could have been processed incorrectly, leading to an invalid memory read, and potentially further memory corruption. This vulne…

Fix: 91.10 / 101+
Fix from $1,950 2022-12-22
Firefox HIGH 7.5
CVE-2020-6821

When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires t…

Fix: 68.7.0 / 75.0+
Fix from $1,950 2020-04-24
Thunderbird MEDIUM 6.5
CVE-2020-6793

When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects T…

Fix: 68.5.0+
Fix from $1,600 2020-03-02
Firefox MEDIUM 6.5
CVE-2019-11750

A type confusion vulnerability exists in Spidermonkey, which results in a non-exploitable crash. This vulnerability affects Firefox < 69 and Firefox …

Fix: 68.1.0 / 69.0+
Fix from $1,600 2019-09-27
Firefox HIGH 7.5
CVE-2019-11694

A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to …

Fix: 60.7.0 / 67.0+
Fix from $1,950 2019-07-23
Firefox CRITICAL 9.8
CVE-2019-9805

A latent vulnerability exists in the Prio library where data may be read from uninitialized memory for some functions, leading to potential memory co…

Fix: 66.0+
Fix from $2,300 2019-04-26