CWE-248 未捕获的异常 类弱点 230 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-248 属于未捕获异常漏洞，指函数抛出异常但未被代码正确捕获处理。攻击者通常通过构造特定输入触发异常，导致程序崩溃引发拒绝服务，或泄露堆栈跟踪等敏感信息。开发者应通过完善异常处理机制，使用 try-catch 块包裹潜在风险代码，并记录详细日志而非直接暴露内部细节，从而提升系统稳定性与安全性。
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-2229 | undici 安全漏洞 — undici | 7.5 | High | 2026-03-12 |
| CVE-2026-1528 | undici 安全漏洞 — undici | 7.5 | High | 2026-03-12 |
| CVE-2026-31870 | cpp-httplib 安全漏洞 — cpp-httplib | 7.5 | High | 2026-03-11 |
| CVE-2026-31812 | Quinn 安全漏洞 — quinn | 8.7 | High | 2026-03-10 |
| CVE-2026-20068 | Cisco Secure Firewall Threat Defense和Cisco IOS XE Software 安全漏洞 — Cisco Cyber Vision | 5.8 | Medium | 2026-03-04 |
| CVE-2026-20031 | Cisco Secure Endpoint 安全漏洞 — Cisco Secure Endpoint | 5.3 | Medium | 2026-03-04 |
| CVE-2026-27631 | Exiv2 安全漏洞 — exiv2 | 5.5AI | Medium AI | 2026-03-02 |
| CVE-2026-1507 | AVEVA PI Data Archive PI Server 安全漏洞 — PI Data Archive PI Server | 7.5 | High | 2026-02-10 |
| CVE-2026-25577 | Emmett-Core 安全漏洞 — core | 7.5 | High | 2026-02-10 |
| CVE-2025-13064 | AXIS Camera Station Pro 安全漏洞 — AXIS Camera Station Pro | 4.5 | Medium | 2026-02-10 |
| CVE-2025-67647 | SvelteKit 代码问题漏洞 — kit | 7.5AI | High AI | 2026-01-15 |
| CVE-2025-66578 | Xmlseclibs 安全漏洞 — xmlseclibs | 6.0 | Medium | 2025-12-09 |
| CVE-2025-20758 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 | 7.5AI | High AI | 2025-12-02 |
| CVE-2025-20754 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 | 7.5AI | High AI | 2025-12-02 |
| CVE-2025-20753 | MediaTek Chipsets 安全漏洞 — MT2735, MT2737, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6879, MT6880, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6980, MT6980D, MT6983, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT8675, MT8771, MT8791, MT8791T, MT8797 | 7.5AI | High AI | 2025-12-02 |
| CVE-2025-66305 | Grav 安全漏洞 — grav | 4.9AI | Medium AI | 2025-12-01 |
| CVE-2025-8870 | Arista EOS 安全漏洞 — EOS | 4.9 | Medium | 2025-11-14 |
| CVE-2025-12423 | Azure Access Technology BLU-IC2和Azure Access Technology BLU-IC4 安全漏洞 — BLU-IC2 | 7.5AI | High AI | 2025-10-28 |
| CVE-2025-59462 | SICK AG TLOC100-100 安全漏洞 — TLOC100-100 all Firmware versions | 6.5 | Medium | 2025-10-27 |
| CVE-2025-48430 | Gallagher Command Centre Server 安全漏洞 — Command Centre Server | 5.5 | Medium | 2025-10-23 |
| CVE-2025-62370 | Alloy 安全漏洞 — core | 7.5 | High | 2025-10-15 |
| CVE-2025-59229 | Microsoft Office 安全漏洞 — Microsoft 365 Apps for Enterprise | 5.5 | Medium | 2025-10-14 |
| CVE-2025-9124 | Rockwell Automation Compact GuardLogix 5370 安全漏洞 — Compact GuardLogix® 5370 | 7.5AI | High AI | 2025-10-14 |
| CVE-2025-59538 | Argo CD 安全漏洞 — argo-cd | 7.5 | High | 2025-10-01 |
| CVE-2025-35436 | thorium 安全漏洞 — Thorium | 5.3 | Medium | 2025-09-17 |
| CVE-2025-59014 | TYPO3 CMS 安全漏洞 — TYPO3 CMS | 4.9AI | Medium AI | 2025-09-09 |
| CVE-2025-54777 | Konica Minolta bizhub 安全漏洞 — Multiple products in bizhub series | 7.5 | - | 2025-08-29 |
| CVE-2025-55194 | Part-DB 安全漏洞 — Part-DB-server | 5.7 | Medium | 2025-08-13 |
| CVE-2013-10065 | Codeorigin Sysax Multi Server 安全漏洞 — Multi-Server | 7.5AI | High AI | 2025-08-05 |
| CVE-2025-7338 | Multer 安全漏洞 — multer | 7.5 | High | 2025-07-17 |
CWE-248（未捕获的异常） 是常见的弱点类别，本平台收录该类弱点关联的 230 条 CVE 漏洞。