Insufficient Random Values vulnerabilities
CWE-330 · 12 tracked
Insufficient Random Values (CWE-330) is a recognized software weakness class in the MITRE CWE catalog. The vulnerabilities below are all instances of this pattern.
How it’s exploited
How insufficient random values is exploited depends on the specific vulnerability, but every CVE in this class shares the same underlying flaw pattern — which is why the same class of mitigation applies across them.
How to prevent it
Recognizing the insufficient random values pattern lets you apply one class of fix across every affected component. Each CVE page below carries specific, version-level remediation.
Tracked insufficient random values vulnerabilities
12 CVEs in this class, each with severity, exploit status, EPSS, and remediation.
GHSA-92hr-gmr6-h8cpGHSA-gq4g-fpc9-vjfqCVE-2022-31008CVE-2026-50009CVE-2026-41701CVE-2026-41838CVE-2026-45673CVE-2026-47703CVE-2026-41207GHSA-qv2q-c278-pch5CVE-2026-42155CVE-2026-7847
Frequently asked questions
- What is Insufficient Random Values?
- Insufficient Random Values (CWE-330) is a recognized software weakness class in the MITRE CWE catalog. The vulnerabilities below are all instances of this pattern.
- How is insufficient random values exploited?
- How insufficient random values is exploited depends on the specific vulnerability, but every CVE in this class shares the same underlying flaw pattern — which is why the same class of mitigation applies across them.
- How do you prevent insufficient random values?
- Recognizing the insufficient random values pattern lets you apply one class of fix across every affected component. Each CVE page below carries specific, version-level remediation.
- How many insufficient random values vulnerabilities are there?
- O3 tracks 12 vulnerabilities classified as CWE-330 (Insufficient Random Values), each with severity, exploit status, EPSS exploitation probability, and remediation. The full list is below.