Fallos del tipo CWE-248

379 resultados

Exceção Não Capturada

Quando o código não trata adequadamente exceções ou erros gerados durante a execução, permitindo que eles se propaguem sem controle. Isso causa interrupção inesperada do programa, possível revelação de informações sensíveis em mensagens de erro e deixa a aplicação em estado indefinido ou vulnerável.

Ejemplo

Um endpoint web tenta acessar um arquivo ou banco de dados sem try-catch; se o recurso não existir, a exceção não tratada expõe stack traces contendo caminhos internos, credenciais ou detalhes da infraestrutura para o cliente atacante.

Cómo mitigar

Implemente blocos try-catch específicos para cada operação que possa falhar (I/O, banco de dados, rede). Defina um mecanismo centralizado de tratamento de erros que logue internamente sem expor detalhes ao usuário final, e sempre finalize recursos (conexões, arquivos) em blocos finally ou use try-with-resources.

CVE-2026-113872HIGHmulter vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardownEPSS 0.4%CVE-2026-34752HIGHHaraka affected by DoS via `__proto__` email headerEPSS 0.4%CVE-2026-95842HIGHMoquette uncaught MQTT command exceptions can terminate shared session event loopsEPSS 0.4%CVE-2026-115892MEDIUMWasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload typeEPSS 0.4%CVE-2024-38525HIGHdd-trace-cpp malformed unicode header values may cause crashEPSS 0.4%CVE-2018-11465—A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versEPSS 0.4%CVE-2026-53530HIGHratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)EPSS 0.4%CVE-2024-0754MEDIUMSome WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.EPSS 0.4%CVE-2025-43855HIGHtRPC 11 WebSocket DoS VulnerabilityEPSS 0.4%CVE-2026-72644MEDIUMUncaught Exception in Kibana Leading to Denial of ServiceEPSS 0.4%CVE-2026-101035MEDIUMaligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exceptionEPSS 0.4%CVE-2025-53365HIGHMCP Python SDK has Unhandled Exception in Streamable HTTP Transport ,Leading to Denial of ServiceEPSS 0.4%CVE-2025-59229MEDIUMMicrosoft Office Denial of Service VulnerabilityEPSS 0.4%CVE-2023-5038HIGHUnauthenticated DoSEPSS 0.4%CVE-2026-82231HIGHApache bRPC: Malformed Thrift T_EXCEPTION reply causes process termination in Thrift clientEPSS 0.4%CVE-2025-66305MEDIUMGrav vulnerable to Denial of Service via Improper Input Handling in 'Supported' ParameterEPSS 0.4%CVE-2026-101918MEDIUMPyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)EPSS 0.4%CVE-2026-92081MEDIUMfastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responsesEPSS 0.4%CVE-2026-85024MEDIUMundici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompressionEPSS 0.4%CVE-2026-87123MEDIUMhbs vulnerable to Denial of Service via unhandled exception in async helper output escapingEPSS 0.4%