CWE-909Missing Initialization of Resource

Abstraction: Class · CVEs in our corpus: 102

The product does not initialize a critical resource.

Many resources require initialization before they can be properly used. If a resource is not initialized, it could contain unpredictable or expired data, or it could be initialized to defaults that are invalid. This can have security implications when the resource is expected to have certain properties or values.

Last updated: 20 August 2026 13:14 UTC

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SA-11 Developer Testing and Evaluation
SA-8 Security and Privacy Engineering Principles
SA-15 Development Process, Standards, and Tools

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2022-22704`	7.6	9.8	0.0133	2022-01-06
`CVE-2019-25016`	7.0	8.8	0.0265	2021-01-28
`CVE-2021-23994`	6.9	8.8	0.0176	2021-06-24
`CVE-2018-14647`	6.8	7.5	0.1091	2018-09-25
`CVE-2021-29980`	6.8	8.8	0.0141	2021-08-17
`CVE-2019-9639`	6.7	7.5	0.0820	2019-03-09
`CVE-2018-10811`	6.6	7.5	0.0620	2018-06-19
`CVE-2019-3804`	6.5	7.5	0.0486	2019-03-26
`CVE-2019-12410`	6.5	7.5	0.0461	2019-11-08
`CVE-2020-16932`	6.5	7.8	0.0482	2020-10-16
`CVE-2018-1000224`	6.4	7.5	0.0379	2018-08-20
`CVE-2019-12408`	6.4	7.5	0.0325	2019-11-08
`CVE-2019-19553`	6.4	7.5	0.0413	2019-12-05
`CVE-2025-38601`	6.4	8.8	0.0023	2025-08-19
`CVE-2019-16714`	6.3	7.5	0.0270	2019-09-23
`CVE-2018-21247`	6.3	7.5	0.0236	2020-06-17
`CVE-2021-1405`	6.3	7.5	0.0303	2021-04-08
`CVE-2021-36386`	6.3	7.5	0.0256	2021-07-30
`CVE-2024-8178`	6.3	8.8	0.0060	2024-09-05
`CVE-2020-11741`	6.2	8.8	0.0042	2020-04-14
`CVE-2021-36513`	6.2	7.5	0.0187	2021-10-18
`CVE-2021-31919`	6.1	7.5	0.0108	2021-04-30
`CVE-2022-29968`	6.1	7.8	0.0107	2022-05-02
`CVE-2019-25054`	6.0	7.5	0.0096	2021-12-27
`CVE-2021-23386`	5.9	7.7	0.0143	2021-05-20