CWE-665
372 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 372
- Last 12 months
- 35
- Critical
- 24
- Known exploited
- 3
Critical 24High 143Medium 173Low 32Not scored 0
CVEs per yearBy the year they were published
- 20142
- 20161
- 201722
- 201837
- 201935
- 202047
- 202146
- 202242
- 202345
- 202435
- 202515
- 202634
Known exploitedNewest addition to KEV first
- CVE-2022-0847
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe…
kernel
ExploitedHigh7.8 - CVE-2013-1675
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data…
Product not named
ExploitedMedium6.5 - CVE-2020-27950
A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High…
Apple · watchOS
ExploitedMedium5.5
Newest CVEs
- CVE-2026-103394
Session Smart Router: An incomplete operator causes the use of incorrect encryption keys during security policy updates.
Juniper Networks · Session Smart Router
Low3.7 - CVE-2026-116115
Yoosee GM8135S Camera WiFi Configuration wpa_supplicantX.conf initialization
Yoosee · GM8135S Camera
Low2.3 - CVE-2026-101957
Junos OS and Junos OS Evolved: A remote BGP peer causes an rpd crash when long-lived graceful restart (LLGR) is used
Juniper Networks · Junos OS
High8.7 - CVE-2026-94370
Memory corruption (double free / use-after-free) vulnerability in core string handling impacts Qt for MCUs
qt · Qt_for_MCUs
Medium6.5 - CVE-2026-107175
MISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes
MISP · MISP
Medium5.3 - CVE-2026-93495
Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted…
ASUS · Motherboard(PRIME Z390-A )
High7.0 - CVE-2026-57229
Suricata smtp/mime: incomplete state reset allows detection bypass
OISF · suricata
Medium5.3 - CVE-2026-87616
Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and…
Google · Chrome
High8.3 - CVE-2026-78940
Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page.…
Google · Chrome
Medium4.3 - CVE-2026-68461
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
Linux · Linux
High7.8