CWE-755 对异常条件的处理不恰当 类弱点 173 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-755属于异常处理不当漏洞，指软件未能正确应对或忽略异常状况。攻击者常通过触发特定异常（如空指针或资源耗尽）导致程序崩溃、拒绝服务或执行非预期逻辑，从而获取权限或破坏系统稳定性。开发者应避免捕获过于宽泛的异常，需实施细粒度的错误处理机制，确保在异常发生时能安全恢复状态或提供明确反馈，防止内部信息泄露及服务中断。
protected void doPost (HttpServletRequest req, HttpServletResponse res) throws IOException { String ip = req.getRemoteAddr(); InetAddress addr = InetAddress.getByName(ip); ... out.println("hello " + addr.getHostName()); }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { //We do nothing so we just ignore the error. }foo=malloc(sizeof(char)); //the next line checks to see if malloc failed if (foo==NULL) { printf("Malloc failed to allocate memory resources"); return -1; }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-63450 | Suricata FTP 应用层检测禁用漏洞 — suricata | 3.7 | Low | 2026-09-18 |
| CVE-2026-81515 | Steeltoe 服务发现 Eureka 拒绝服务漏洞 — security-advisories | 7.5 | High | 2026-09-17 |
| CVE-2026-81516 | Steeltoe Consul发现服务DoS漏洞 — security-advisories | 7.5 | High | 2026-09-17 |
| CVE-2026-89025 | Hirschmann HiOS交换机恶意HTTP请求拒绝服务漏洞 — Hirschmann HiOS Switch Platform | 7.5 | High | 2026-09-15 |
| CVE-2026-49305 | Huawei HarmonyOS 异常处理不当漏洞 — HarmonyOS | 6.2 | Medium | 2026-08-17 |
| CVE-2026-59952 | Open Circle valibot 异常处理不当漏洞 — valibot | 6.9 | Medium | 2026-07-30 |
| CVE-2026-42792 | Erlang OTP 异常处理不当漏洞 — OTP | 6.3 | Medium | 2026-07-27 |
| CVE-2026-48036 | Kerberosmansour Hulumi 异常处理不当漏洞 — hulumi | 8.4 | High | 2026-07-24 |
| CVE-2026-16730 | Red Hat dbus-broker 异常处理不当漏洞 — Red Hat Enterprise Linux 10 | 5.5 | Medium | 2026-07-24 |
| CVE-2026-44505 | Nimiq 安全漏洞 — core-rs-albatross | 5.3 | Medium | 2026-06-09 |
| CVE-2026-49235 | NLnet Labs Routinator 安全漏洞 — Routinator | - | - | 2026-06-08 |
| CVE-2026-49232 | NLnet Labs Routinator 安全漏洞 — Routinator | - | - | 2026-06-08 |
| CVE-2026-44902 | opentelemetry-js 安全漏洞 — opentelemetry-js | 7.5 | High | 2026-05-27 |
| CVE-2026-48961 | IO-Compress 安全漏洞 — IO::Compress | - | - | 2026-05-27 |
| CVE-2026-8162 | multiparty 安全漏洞 — multiparty | 7.5 | High | 2026-05-12 |
| CVE-2026-23666 | Microsoft .NET Framework 安全漏洞 — Microsoft .NET Framework 3.5 | 7.5 | High | 2026-04-14 |
| CVE-2026-40074 | SvelteKit 安全漏洞 — kit | 6.5 | - | 2026-04-10 |
| CVE-2026-28542 | Huawei EMUI和Huawei HarmonyOS 安全漏洞 — HarmonyOS | 7.3 | High | 2026-03-05 |
| CVE-2026-27195 | wasmtime 安全漏洞 — wasmtime | 6.8 | - | 2026-02-24 |
| CVE-2026-27586 | Caddy 安全漏洞 — caddy | 8.2 | - | 2026-02-24 |
| CVE-2026-25957 | Cube 安全漏洞 — cube | 6.5 | Medium | 2026-02-09 |
| CVE-2026-23762 | VB-Audio Voicemeeter和VB-Audio Matrix 安全漏洞 — Voicemeeter (Standard) | 6.3AI | Medium AI | 2026-01-22 |
| CVE-2026-21906 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 7.5 | High | 2026-01-15 |
| CVE-2026-0203 | Juniper Networks Junos OS 安全漏洞 — Junos OS | 6.5 | Medium | 2026-01-15 |
| CVE-2025-69255 | rustfs 安全漏洞 — rustfs | 7.5 | - | 2026-01-07 |
| CVE-2025-66622 | Matrix Rust SDK 安全漏洞 — matrix-rust-sdk | 7.5AI | High AI | 2025-12-09 |
| CVE-2025-62711 | wasmtime 安全漏洞 — wasmtime | 7.5 | - | 2025-10-24 |
| CVE-2025-53702 | Vilar VS-IPC1002 安全漏洞 — VS-IPC1002 | 5.7AI | Medium AI | 2025-10-23 |
| CVE-2025-9437 | Rockwell Automation ArmorStart AOP 安全漏洞 — ArmorStart AOP | 7.5AI | High AI | 2025-10-14 |
| CVE-2025-34193 | Vasion Print和Vasion Print Virtual Appliance Host 安全漏洞 — Print Virtual Appliance Host | 8.4 | - | 2025-09-19 |
CWE-755（对异常条件的处理不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 173 条 CVE 漏洞。