CWE-1419 Incorrect Initialization of Resource
classThe product attempts to initialize a resource but does not correctly do so, which might leave the resource in an unexpected, incorrect, or insecure state when it is accessed.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (9)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-109619US | high8.1OT critical | KEV | ||
PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The g… | ||||
| CVE-2026-109618US | critical9.8OT critical | KEV | ||
PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave… | ||||
| CVE-2026-105733US | high8.8 | — | ||
Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. | ||||
| CVE-2025-39784US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix link speed calculation on retrain failure
When pcie_failed_link_retrain() fails to retrain, it tries… | ||||
| CVE-2022-49742US | medium5.5 | — | ||
In the Linux kernel, the following vulnerability has been resolved:
f2fs: initialize locks earlier in f2fs_fill_super()
syzbot is reporting lockdep warning at f2fs_handle_error()… | ||||
| CVE-2025-71195US | — | — | ||
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: xilinx: xdma: Fix regmap max_register
The max_register field is assigned the size of the register m… | ||||
| CVE-2026-21913US | — | — | ||
An Incorrect Initialization of Resource vulnerability in the Internal Device Manager (IDM) of Juniper Networks Junos OS on EX4000 models allows an unauthenticated, network-based at… | ||||
| CVE-2025-12445US | —OT elevated | — | ||
Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafte… | ||||
| CVE-2025-53800US | — | — | ||
No cwe for this issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan