Weaknesses of type CWE-755

274 results

Tratamento inadequado de condições excepcionais

Ocorre quando o código falha em capturar, validar ou responder adequadamente a erros e situações anormais. O programa continua executando com estado inválido, ignorando sinais de falha do sistema ou bibliotecas, permitindo que bugs se propaguem e criem vulnerabilidades de segurança.

Example

Uma aplicação tenta abrir um arquivo sem verificar se a operação falhou; se o arquivo não existe, a variável fica nula, e acessá-la depois causa crash ou comportamento impredizível. Ou um banco de dados retorna erro, mas o código ignora e usa dados vazios como válidos.

How to mitigate

Sempre capture exceções e erros explicitamente — use try/catch, verifique códigos de retorno e valores nulos antes de usar. Registre falhas em logs, falhe de forma segura (recuse a operação) e nunca assuma que uma chamada de função funcionou sem comprovação.

CVE-2025-21596MEDIUMJunos OS: SRX1500,SRX4100,SRX4200: Execution of low-privileged CLI command results in chassisd crashEPSS 0.2%CVE-2026-16730MEDIUMDbus-broker: dbus-broker: session bus denial of service via emfile during peer setupEPSS 0.2%CVE-2022-20414MEDIUMIn setImpl of AlarmManagerService.java, there is a possible way to put a device into a boot loop due to an uncaught exception. This could leEPSS 0.1%CVE-2022-20500MEDIUMIn loadFromXml of ShortcutPackage.java, there is a possible crash on boot due to an uncaught exception. This could lead to local denial of sEPSS 0.1%CVE-2023-43686MEDIUMAn issue was discovered in Malwarebytes 4.x and 5.x (and Nebula 2020-10-21 and later). A large number of Firefox preference files can cause EPSS 0.1%CVE-2026-49305MEDIUMPermission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availabilEPSS 0.1%CVE-2026-54578LOWmport verify can compare stale checksum data after hashing failuresEPSS 0.1%CVE-2021-25473MEDIUMAssuming a shell privilege is gained, an improper exception handling for multi_sim_bar_hide_by_meadia_full value in SystemUI prior to SMR OcEPSS 0.1%CVE-2021-25474MEDIUMAssuming a shell privilege is gained, an improper exception handling for multi_sim_bar_show_on_qspanel value in SystemUI prior to SMR Oct-20EPSS 0.1%CVE-2025-54634HIGHVulnerability of improper processing of abnormal conditions in huge page separation. Impact: Successful exploitation of this vulnerability mEPSS 0.1%CVE-2023-20993HIGHIn multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. This could lead toEPSS 0.1%CVE-2026-28542HIGHPermission bypass vulnerability in the system service framework. Impact: Successful exploitation of this vulnerability may affect availabiliEPSS 0.1%CVE-2024-12236MEDIUMUse of Custom URI for media inputs with VPC-SC enabled potentially leads to data exfiltrationEPSS 0.1%CVE-2026-123555HIGHZebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification FailuresEPSS —