CWE-453

24 published CVEs are weaknesses of this kind, as the records or NVD name it.

Newest CVEs

CVE-2026-95404
In multiple locations, there is a possible way to modify coprocessor instruction and data memory from non-secure software due to an insecure default value.…
Google · Android
Medium6.7
CVE-2026-57013
In access_control_enable of multiple files, there is a possible way to release secure coprocessors from reset via unclaimed firewall registers due to an…
Google · Android
Medium6.7
CVE-2026-103577
Microsoft QUIC Security Feature Bypass Vulnerability
Microsoft · Windows 11 version 23H2
High7.5
CVE-2026-109828
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable
libsndfile
Medium5.3
CVE-2026-92950
vm2 before 3.11.7 Sandbox Escape via CLI require
patriksimek · vm2
Critical9.3
CVE-2026-19212
WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable
WonderTrader
Medium5.3
CVE-2026-0082
In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access permission assignment due to an insecure default value. This could…
Google · Android
Critical10.0
CVE-2026-41330
OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy
OpenClaw · OpenClaw
Low2.0
CVE-2025-61926
Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret
ossf · allstar
Medium4.6
CVE-2025-48563
In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to an insecure default value. This could lead to local…
Google · Android
High7.8