Weaknesses of type CWE-755

274 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2024-39541HIGHJunos OS and Junos OS Evolved: Inconsistent information in the TE database can lead to an rpd crashEPSS 0.3%CVE-2026-101017MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional conditionEPSS 0.3%CVE-2026-8162HIGHmultiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsingEPSS 0.3%CVE-2026-101016MEDIUMTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional conditionEPSS 0.3%CVE-2023-3280MEDIUMCortex XDR Agent: Local Windows User Can Disable the AgentEPSS 0.3%CVE-2026-85473MEDIUMOut-of-Range Timestamp Claim Handling in auth0/java-jwtEPSS 0.3%CVE-2026-105757MEDIUMvLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)EPSS 0.3%CVE-2022-32655MEDIUMIn Wi-Fi driver, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege wiEPSS 0.3%CVE-2026-94651HIGHApache Thrift: Java `TSaslNonblockingServer` `Computation.run` orphans a connection on a pre-auth parse errorEPSS 0.3%CVE-2024-30380HIGHJunos OS and Junos OS Evolved: l2cpd crash upon receipt of a specific TLVEPSS 0.3%CVE-2026-120222MEDIUMundici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replayEPSS 0.3%CVE-2020-2020MEDIUMCortex XDR Agent: Exceptional condition denial-of-service (DoS)EPSS 0.3%CVE-2025-48886MEDIUMhydra-node dangerously assumes L1 event finality and does not consider failed transactionsEPSS 0.3%CVE-2023-28768MEDIUMImproper frame handling in the Zyxel XGS2220-30 firmware version V4.80(ABXN.1), XMG1930-30 firmware version V4.80(ACAR.1), and XS1930-10 firEPSS 0.3%CVE-2025-52947HIGHJunos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crashEPSS 0.3%CVE-2020-5387LOWDell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access EPSS 0.3%CVE-2020-2505LOWSensitive information via generation of error messages vulnerability in QESEPSS 0.3%CVE-2026-44505MEDIUMNimiq network-libp2p: Untrusted peer can wedge DHTEPSS 0.3%CVE-2026-27586HIGHCaddy's mTLS client authentication silently fails open when CA certificate file is missing or malformedEPSS 0.3%CVE-2024-53063HIGHmedia: dvbdev: prevent the risk of out of memory accessEPSS 0.3%