CWE · MITRE source
CWE-909Missing Initialization of Resource
The product does not initialize a critical resource.
Many resources require initialization before they can be properly used. If a resource is not initialized, it could contain unpredictable or expired data, or it could be initialized to defaults that are invalid. This can have security implications when the resource is expected to have certain properties or values.
Last updated: 04 July 2026 00:28 UTC
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2022-22704 | 7.0 | 9.8 | 0.0133 | 2022-01-06 |
CVE-2018-14647 | 6.0 | 7.5 | 0.1091 | 2018-09-25 |
CVE-2005-1036 | 5.5 | 7.8 | 0.0038 | 2005-05-02 |
CVE-2018-10811 | 5.5 | 7.5 | 0.0712 | 2018-06-19 |
CVE-2018-1000224 | 5.5 | 7.5 | 0.0379 | 2018-08-20 |
CVE-2019-9639 | 5.5 | 7.5 | 0.0820 | 2019-03-09 |
CVE-2019-3804 | 5.5 | 7.5 | 0.0486 | 2019-03-26 |
CVE-2019-16714 | 5.5 | 7.5 | 0.0270 | 2019-09-23 |
CVE-2019-12408 | 5.5 | 7.5 | 0.0323 | 2019-11-08 |
CVE-2019-12410 | 5.5 | 7.5 | 0.0471 | 2019-11-08 |
CVE-2019-19553 | 5.5 | 7.5 | 0.0413 | 2019-12-05 |
CVE-2020-11741 | 5.5 | 8.8 | 0.0042 | 2020-04-14 |
CVE-2018-21247 | 5.5 | 7.5 | 0.0236 | 2020-06-17 |
CVE-2020-16932 | 5.5 | 7.8 | 0.0447 | 2020-10-16 |
CVE-2020-0438 | 5.5 | 7.8 | 0.0016 | 2020-11-10 |
CVE-2019-25016 | 5.5 | 8.8 | 0.0265 | 2021-01-28 |
CVE-2021-1405 | 5.5 | 7.5 | 0.0316 | 2021-04-08 |
CVE-2021-31919 | 5.5 | 7.5 | 0.0108 | 2021-04-30 |
CVE-2021-23386 | 5.5 | 7.7 | 0.0143 | 2021-05-20 |
CVE-2021-23994 | 5.5 | 8.8 | 0.0176 | 2021-06-24 |
CVE-2021-36386 | 5.5 | 7.5 | 0.0256 | 2021-07-30 |
CVE-2021-29980 | 5.5 | 8.8 | 0.0141 | 2021-08-17 |
CVE-2021-36513 | 5.5 | 7.5 | 0.0181 | 2021-10-18 |
CVE-2019-25054 | 5.5 | 7.5 | 0.0096 | 2021-12-27 |
CVE-2021-39966 | 5.5 | 7.5 | 0.0068 | 2022-01-03 |