CWE•Base•Draft•20 recent CVEs

CWE-248Uncaught Exception

Description

An exception is thrown from a function, but it is not caught.

When an exception is not caught, it may cause the program to crash or expose sensitive information.

Common consequences

Availability,Confidentiality→DoS: Crash, Exit, or Restart,Read Application Data
An uncaught exception could cause the system to be placed in a state that could lead to a crash, exposure of sensitive information or other unintended behaviors.

Related CWEs

CWE-705Incorrect Control Flow Scoping CWE-755Improper Handling of Exceptional Conditions CWE-703Improper Check or Handling of Exceptional Conditions CWE-703Improper Check or Handling of Exceptional Conditions

Recent CVEs classified under this CWE