CWE-460 · Input Validation and Logic
Improper Cleanup on Thrown Exception
30CVEs
SortMost likely exploited
30 CVEs with CWE-460 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-34716Cisco Expressway Series and TelePresence Video Communication Server Remote Code Execution VulnerabilityCisco · Cisco TelePresence Video Communication Server (VCS) Expressway · CVSS 6.7 · 2021-08-18 | 6.7 | 2.4% | 2021-08-18 |
| CVE-2022-22150A memory corruption vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 11.1.0.52543. A specially-crafted PDF document can trigger an exception w…Foxit · Foxit · CVSS 8.8 · 2022-02-04 | 8.8 | 1.8% | 2022-02-04 |
| CVE-2016-9592openshift before versions 3.3.1.11, 3.2.1.23, 3.4 is vulnerable to a flaw when a volume fails to detach, which causes the delete operation to fail with 'VolumeInUse' error. Since…Redhat · openshift · CVSS 4.3 · 2018-04-16 | 4.3 | 1.2% | 2018-04-16 |
| CVE-2019-14891A flaw was found in cri-o, as a result of all pod-related processes being placed in the same memory cgroup. This can result in container management (conmon) processes being killed…Kubernetes · cri-o · CVSS 5 · 2019-11-25 | 5.0 | 0.8% | 2019-11-25 |
| CVE-2017-9657Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring station is possible. In th…Philips · IntelliVue MX40 Patient Worn Monitor · 2018-04-30 | – | 0.8% | 2018-04-30 |
| CVE-2022-3301Improper Cleanup on Thrown Exception in ikus060/rdiffwebikus060 · ikus060/rdiffweb · CVSS 4.3 · 2022-09-26 | 4.3 | 0.7% | 2022-09-26 |
| CVE-2026-111103HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Banditmtrudel · bandit · CVSS 8.2 · 2026-10-26 | 8.2 | 0.6% | 2026-10-26 |
| CVE-2026-93710Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooksNo vendor recorded · CVSS 7.5 · 2026-09-22 | 7.5 | 0.6% | 2026-09-22 |
| CVE-2026-61387In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation…Eclipse Foundation · Eclipse Milo · CVSS 6.9 · 2026-08-04 | 6.9 | 0.6% | 2026-08-04 |
| CVE-2023-46393gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.Gougucms · Gougucms · 2023-10-27 | – | 0.5% | 2023-10-27 |
| CVE-2022-4744A double-free flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGIST…Linux · Kernel · CVSS 7.8 · 2023-03-30 | 7.8 | 0.5% | 2023-03-30 |
| CVE-2025-30157Envoy crashes when HTTP ext_proc processes local repliesenvoyproxy · envoy · CVSS 6.5 · 2025-03-21 | 6.5 | 0.4% | 2025-03-21 |
| CVE-2026-33481Syft improper temporary file cleanupanchore · syft · CVSS 5.3 · 2026-03-26 | 5.3 | 0.4% | 2026-03-26 |
| CVE-2026-48524PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS)jpadilla · pyjwt · CVSS 3.7 · 2026-05-28 | 3.7 | 0.4% | 2026-05-28 |
| CVE-2025-32439pleezer allows resource exhaustion through uncollected hook script processesroderickvd · pleezer · CVSS 6.5 · 2025-04-15 | 6.5 | 0.4% | 2025-04-15 |
| CVE-2026-86748Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archivegrokability · snipe-it · CVSS 6.1 · 2026-09-09 | 6.1 | 0.4% | 2026-09-09 |
| CVE-2024-12289Boundary Controller Incorrectly Handles HTTP Requests On Initialization Which May Lead to a Denial of ServiceHashiCorp · Boundary · CVSS 5.9 · 2024-12-12 | 5.9 | 0.4% | 2024-12-12 |
| CVE-2020-14304A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitializ…Linux Kernel · kernel · CVSS 4.4 · 2020-09-15 | 4.4 | 0.4% | 2020-09-15 |
| CVE-2017-15127A flaw was found in the hugetlb_mcopy_atomic_pte function in mm/hugetlb.c in the Linux kernel before 4.13. A superfluous implicit page unlock for VM_SHARED hugetlbfs mapping could…Linux · Linux kernel before 4.13 · 2018-01-14 | – | 0.4% | 2018-01-14 |
| CVE-2026-40583UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant HaltUltraDAGcom · core · CVSS 8.8 · 2026-04-21 | 8.8 | 0.4% | 2026-04-21 |
| CVE-2026-20118Cisco IOS-XR NCS 5500 and NCS 5700 Egress Packet Network Interfaces Aligner Interrupt Denial of Service VulnerabilityCisco · Cisco IOS XR Software · CVSS 6.8 · 2026-03-11 | 6.8 | 0.4% | 2026-03-11 |
| CVE-2026-123558Zebra before 7.0.0 Checkpoint Sync Denial of Service via Cancelled Verifier RewindZcashFoundation · zebra · CVSS 7.5 · 2026-11-08 | 7.5 | 0.3% | 2026-11-08 |
| CVE-2026-57890Improper cleanup on thrown exception in the MigTD's SPDM responder for the Intel(R) TDX Migration Trust Domain (MigTD) within Ring 0: Hypervisor may allow an information disclosur…Intel(R) TDX Migration Trust Domain (MigTD) · CVSS 8.7 · 2026-11-10 | 8.7 | 0.3% | 2026-11-10 |
| CVE-2024-0316Improper cleanup vulnerability in FireEye Endpoint SecurityFireEye · FireEye Endpoint Security · CVSS 6.8 · 2024-01-15 | 6.8 | 0.3% | 2024-01-15 |
| CVE-2024-20354A vulnerability in the handling of encrypted wireless frames of Cisco Aironet Access Point (AP) Software could allow an unauthenticated, adjacent attacker to cause a denial of ser…Cisco · Cisco Aironet Access Point Software · CVSS 4.7 · 2024-03-27 | 4.7 | 0.3% | 2024-03-27 |
| CVE-2022-3707A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intel_gvt_dma_map_guest_…Linux · kernel · CVSS 5.5 · 2023-03-06 | 5.5 | 0.2% | 2023-03-06 |
| CVE-2025-69652GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due…Gnu · Binutils · CVSS 6.2 · 2026-03-06 | 6.2 | 0.2% | 2026-03-06 |
| CVE-2026-112326Improper Cleanup on Thrown Exception in GitLabGitLab · GitLab · CVSS 3.1 · 2026-10-21 | 3.1 | 0.2% | 2026-10-21 |
| CVE-2025-59399libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.EVerest · libocpp · CVSS 3.1 · 2025-09-15 | 3.1 | 0.2% | 2025-09-15 |
| CVE-2026-96273Ghidra before 12.1.4 Denial of Service via Unreleased Lock in OptionsDBNationalSecurityAgency · ghidra · CVSS 5.5 · 2026-09-23 | 5.5 | 0.1% | 2026-09-23 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.