CWE-754: Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.
A kind of CWE-703 Improper Check or Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- samsung exynos 1280, exynos 1330, exynos 1380 +10 more +12 more Improper handling of messages before AS security activation can cause unexpected behavior No score
- samsung exynos 1280, exynos 1330, exynos 1380 +12 more +14 more Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory... No score
- samsung exynos 1480, exynos 2200, exynos 2400 +2 more +4 more Memory corruption in GPU driver due to improper validation of VMID reservation. No score
- samsung exynos 1080, samsung semiconductor exynos 9110, exynos modem 5123 +2 more Incorrect handling of SDP payload leads to a Denial of Service No score
- samsung exynos 1080, samsung semiconductor exynos 9110, exynos modem 5123 +2 more +4 more In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability No score
- samsung exynos 1080, samsung semiconductor exynos 9110, exynos modem 5123 +2 more +4 more Incorrect handling of SIP packets leads to baseband crashes No score
- samsung exynos 1080, exynos 1280, exynos 1330 +17 more +19 more Continuously sending control‑plane messages causes the baseband to crashes. No score
- google chrome Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote... 8.8 High
- google chrome Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote... No score
- google chrome Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote... 8.3 High
- darylldoyle svg-sanitizer svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping 8.2 High
- lud jsv jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not 2.1 Low
- openvm-org openvm OpenVM's OpenVmHalo2Verifier self-call can bypass proof verification 8.7 High
- openwallet-foundation @sd-jwt/core, @sd-jwt/decode +1 more SD JWT JS: Tampered disclosures silently dropped instead of rejected 7.1 High
- parse-community parse-server Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 afterSave Trigger and LiveQuery Bypass via Dot Notation Keys 2.3 Low
- mattermost Insufficient length validation when parsing Zoom chat transcriptions 6.5 Medium
- mattermost, mattermost server +1 more Null condition in Playbooks import crashes the plugin 4.3 Medium
- google chrome Memory corruption in Core in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to... 8.8 High
- google chrome Use after free in Performance in Google Chrome prior to 156.0.8078.47 allowed a remote attacker... 8.8 High
- signal ringrtc In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can... 9.3 Critical
- mz automation libiec61850 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS 7.5 High
- getkin kin-openapi kin-openapi: YAML NaN/Inf Values Bypass Built-in Guards and Panic via OAS 3.1 Validation Path 7.5 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Denial of Service Vulnerability 1.2 Low
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Denial of Service (DoS) on Panorama 4.6 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Improper Input Handling Vulnerability 4.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services 6.6 Medium
- juniper networks junos os Junos OS: MX Series with SPC3: In a source NAT scenario malformed packets will lead to resource leaks and eventually traffic stops 8.7 High
- rabbitmq rabbitmq-server RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation 5.3 Medium
- curl server-set cookie erases cookie jar 8.1 High
- nodejs undici undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake 7.5 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 more Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an... 3.8 Low
- @fastify/jwt @fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed 6.8 Medium
- drupal permissions by term Permissions by Term - Moderately critical - Information disclosure - SA-CONTRIB-2026-214 3.7 Low
- @backstage plugin-search-backend, plugin-search-backend-module-elasticsearch, backstage +2 more +4 more Backstage: Incorrect authorization in search engine permission filtering 4.3 Medium
- google chrome Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39... 5.4 Medium
- google chrome Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote... 8.8 High
- bytecodealliance wasmtime Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Host Panic via WASIp3 Timestamps 6.9 Medium
- zcashfoundation zebra Zebra before 6.3.0 False Readiness via Discarded One-Hash FindBlocks Response 6.9 Medium
- anjvision yssd-rtmp-h5 Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H5 7.2 High
- google chrome Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote... 6.5 Medium
- linux, linux kernel +1 more nvdimm: pmem: keep PREFLUSH before data writes 5.5 Medium
- linux, linux kernel +1 more drm/gud: validate GUD_ROTATION_0 is present in supported rotations 5.5 Medium
- nivocart NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset Controller 6.9 Medium
- google chrome Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote... 4.3 Medium
- rabbitmq amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr 9.5 Critical
- google chrome Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote... 8.3 High
- mattermost, mattermost server +1 more Unauthenticated webhook request with null notification entry could crash the Microsoft Calendar plugin. 5.3 Medium
- mattermost, mattermost server +1 more Boards plugin denial of service via unvalidated block fields.properties 4.3 Medium
- openwebui open webui, open-webui +1 more Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value 4.3 Medium
- google chrome Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a... 5.4 Medium
- Show olderLoading…