CWE-755: Improper handling of exceptional conditions

625 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 7 of them as exploited in the wild.

Critical 31High 283Medium 282Low 29Not scored 0

CVEs per yearBy the year they were published

CVE-2026-109619
RCE via stale global state
PHP Group · PHP
ExploitedCritical9.2
CVE-2026-109618
RCE via OOM corruption
PHP Group · PHP
ExploitedCritical9.2
CVE-2024-29748
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges…
Google · Android
ExploitedHigh7.8
CVE-2020-7247
smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via…
Product not named
ExploitedCritical9.8
CVE-2018-0155
A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series…
Cisco IOS and IOS XE
ExploitedHigh8.6
CVE-2021-38003
Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
Google · Chrome
ExploitedHigh8.8
CVE-2017-5638
The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation…
Apache Software Foundation · Apache Struts
ExploitedCritical9.8

CVE-2026-123555
Zebra 2.3.0 before 7.0.0 Denial of Service via Unscored Script Verification Failures
ZcashFoundation · zebra
High8.7
CVE-2026-120222
undici vulnerable to Denial of Service via unhandled exception in cache-interceptor response replay
undici · undici
Medium5.9
CVE-2026-100300
Apache ZooKeeper: Unauthenticated persistent denial of service via unvalidated quota-node data and paths crashing the transaction-apply thread
Apache Software Foundation · Apache ZooKeeper
High8.7
CVE-2026-67080
HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL Software · BigFix AEX
Medium6.5
CVE-2026-72758
Routinator may exit on malformed ranges
NLnet Labs · Routinator
High7.5
CVE-2026-72757
Routinator HTTP server becomes unavailable with many unclosed connections
NLnet Labs · Routinator
Medium5.3
CVE-2026-72756
Routinator exits on malformed rsync URIs
NLnet Labs · Routinator
High7.5
CVE-2026-72755
Routinator stores TA certificate in cache without validation
NLnet Labs · Routinator
Low3.8
CVE-2026-72754
Routinator exits when parsing an incorrect or very large CRL file
NLnet Labs · Routinator
High7.5
CVE-2026-72753
Routinator incorrectly handles delta updates
NLnet Labs · Routinator
High8.2