CWE-388 · Other weaknesses
Error Handling
37CVEs
1exploited
0with a public check
2likely (EPSS 10%+)
SortMost likely exploited
37 CVEs with CWE-388 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2018-0155In CISA KEVExploitedA vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow…Cisco · Cisco IOS and IOS XE · CVSS 8.6 · 2018-03-28 | 8.6 | 7.7% | 2018-03-28 |
| CVE-2018-1002105In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially craft…Kubernetes · Kubernetes · CVSS 9.8 · 2018-12-05 | 9.8 | 87% | 2018-12-05 |
| CVE-2016-8745A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RC1 to 8.0.39, 7.0.0 to 7.0.73 and 6.0.1…Apache Software Foundation · Apache Tomcat · 2017-08-10 | – | 16% | 2017-08-10 |
| CVE-2016-9778An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.cISC · BIND 9 · CVSS 7.5 · 2019-01-16 | 7.5 | 6.8% | 2019-01-16 |
| CVE-2014-9841The ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact via unknown vectors, related to "throwing of exceptions."Imagemagick · Imagemagick · 2017-03-20 | – | 3.9% | 2017-03-20 |
| CVE-2014-9826ImageMagick allows remote attackers to have unspecified impact via vectors related to error handling in sun files.Imagemagick · Imagemagick · 2017-03-30 | – | 3.7% | 2017-03-30 |
| CVE-2017-5401A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be exploitable. This vulnerability affects…Mozilla · Firefox · 2018-06-11 | – | 3.0% | 2018-06-11 |
| CVE-2016-6357A vulnerability in the configured security policies, including drop email filtering, in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remo…Cisco · Cisco AsyncOS through 9.9.6-026 · 2016-10-28 | – | 2.4% | 2016-10-28 |
| CVE-2016-1480A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ESA) and Web Security Appliances (WSA) c…Cisco · Cisco AsyncOS through WSA10.0.0-000 · 2016-10-28 | – | 2.4% | 2016-10-28 |
| CVE-2006-6682Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remo…Chetcpasswd Project · Chetcpasswd · 2006-12-21 | – | 2.0% | 2006-12-21 |
| CVE-2016-9967Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash…Samsung · Samsung Mobile · 2016-12-16 | – | 1.9% | 2016-12-16 |
| CVE-2016-9966Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash…Samsung · Samsung Mobile · 2016-12-16 | – | 1.9% | 2016-12-16 |
| CVE-2016-9965Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5.1), M(6.0), and N(7.0) software allows attackers to crash…Samsung · Samsung Mobile · 2016-12-16 | – | 1.9% | 2016-12-16 |
| CVE-2016-10062The ReadGROUP4Image function in coders/tiff.c in ImageMagick does not check the return value of the fwrite function, which allows remote attackers to cause a denial of service (ap…Imagemagick · Imagemagick · 2017-03-02 | – | 1.9% | 2017-03-02 |
| CVE-2020-3509Cisco IOS XE Software for Cisco cBR-8 Converged Broadband Routers DHCP Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2020-09-24 | 8.6 | 1.4% | 2020-09-24 |
| CVE-2020-3510Cisco IOS XE Software for Catalyst 9200 Series Switches Umbrella Connector Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2020-09-24 | 8.6 | 1.4% | 2020-09-24 |
| CVE-2016-10414In Android before 2018-04-05 or earlier security patch level on Qualcomm Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear FSM9055, IPQ4019, MDM9206, M…Qualcomm, Inc. · Small Cell SoC , Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear · 2018-04-18 | – | 1.3% | 2018-04-18 |
| CVE-2014-9985In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9635M, SD 400, and SD 800, TOCTOU condition may result in bypassing error condition c…Qualcomm, Inc. · Snapdragon Mobile · 2018-04-18 | – | 1.2% | 2018-04-18 |
| CVE-2016-10466In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9625, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9…Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear · 2018-04-18 | – | 1.2% | 2018-04-18 |
| CVE-2015-9120In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear IPQ4019, MDM9206, MDM9607, MSM8909W, SD 210/…Qualcomm, Inc. · Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear · 2018-04-18 | – | 1.1% | 2018-04-18 |
| CVE-2023-20227A vulnerability in the Layer 2 Tunneling Protocol (L2TP) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condit…Cisco · Cisco IOS XE Software · CVSS 8.6 · 2023-09-27 | 8.6 | 0.9% | 2023-09-27 |
| CVE-2018-0415A vulnerability in the implementation of Extensible Authentication Protocol over LAN (EAPOL) functionality in Cisco Small Business 100 Series Wireless Access Points and Cisco Smal…Cisco Systems, Inc. · Small Business 100 Series Wireless Access Points · 2018-08-15 | – | 0.6% | 2018-08-15 |
| CVE-2026-20263Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service VulnerabilityCisco · Cisco IOS XE Software · CVSS 8.6 · 2026-08-05 | 8.6 | 0.6% | 2026-08-05 |
| CVE-2019-13046linker/linker.c in ToaruOS through 1.10.9 has insecure LD_LIBRARY_PATH handling in setuid applications.Toaruos Project · Toaruos · 2019-06-29 | – | 0.5% | 2019-06-29 |
| CVE-2016-7991On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP messages resulting in remote unsolicited WAP Push SMS messages being ac…Google · Android · 2016-10-31 | – | 0.5% | 2016-10-31 |
| CVE-2019-12380**DISPUTED** An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. phys_efi_set_virtual_address_map in arch/x86/platform/efi/efi.c and efi_call_phys_prol…Linux · Linux Kernel · 2019-05-28 | – | 0.5% | 2019-05-28 |
| CVE-2026-20006Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service VulnerabilityCisco · Cisco Secure Firewall Threat Defense (FTD) Software · CVSS 5.8 · 2026-03-04 | 5.8 | 0.4% | 2026-03-04 |
| CVE-2020-3512Cisco IOS and IOS XE Software PROFINET Link Layer Discovery Protocol Denial of Service VulnerabilityCisco · Cisco IOS · CVSS 7.4 · 2020-09-24 | 7.4 | 0.4% | 2020-09-24 |
| CVE-2017-5577The vc4_get_bcl function in drivers/gpu/drm/vc4/vc4_gem.c in the VideoCore DRM driver in the Linux kernel before 4.9.7 does not set an errno value upon certain overflow detections…Linux · Linux Kernel · 2017-02-06 | – | 0.4% | 2017-02-06 |
| CVE-2016-9588arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanages the #BP and #OF exceptions, which allows guest OS users to cause a denial of service (guest OS crash) by declining to…Linux · Linux Kernel · 2016-12-28 | – | 0.4% | 2016-12-28 |
| CVE-2017-7616Incorrect error handling in the set_mempolicy and mbind compat syscalls in mm/mempolicy.c in the Linux kernel through 4.10.9 allows local users to obtain sensitive information fro…Linux · Linux Kernel · 2017-04-10 | – | 0.4% | 2017-04-10 |
| CVE-2017-16644The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (improper error handling and s…Linux · Linux Kernel · 2017-11-07 | – | 0.4% | 2017-11-07 |
| CVE-2017-8072The cp2112_gpio_direction_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO error status for a zero-length report, w…Linux · Linux Kernel · 2017-04-23 | – | 0.4% | 2017-04-23 |
| CVE-2017-17564An issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service (host OS crash) or gain host OS privileges by leveraging incorrect error handling…Xen · Xen · 2017-12-12 | – | 0.4% | 2017-12-12 |
| CVE-2026-20168Cisco IoT Field Network Director Path Traversal VulnerabilityCisco · Cisco IoT Field Network Director (IoT-FND) · CVSS 6.5 · 2026-05-06 | 6.5 | 0.3% | 2026-05-06 |
| CVE-2015-9218In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, S…Qualcomm, Inc. · Snapdragon Mobile, Snapdragon Wear · 2018-04-18 | – | 0.2% | 2018-04-18 |
| CVE-2019-2237Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Sn…Qualcomm, Inc. · Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivi… · 2019-07-25 | – | 0.2% | 2019-07-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.