Skip to content
OpenAdvisories

Weakness (CWE)

CWE-390: Detection of Error Condition Without Action

Base Draft

The product detects a specific error, but takes no actions to handle the error.

How to prevent it (3 mitigations)

  1. Implementation

    Properly handle each exception. This is the recommended solution. Ensure that all exceptions are handled in such a way that you can be sure of the state of your system at any given moment.

  2. Implementation

    If a function returns an error, it is important to either fix the problem and try again, alert the user that an error has happened and let the program continue, or alert the user and close and cleanup the program.

  3. Testing

    Subject the product to extensive testing to discover some of the possible instances of where/how errors or return values are not handled. Consider testing techniques such as ad hoc, equivalence partitioning, robustness and fault tolerance, mutation, and fuzzing.

Source: MITRE CWE-390

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-111823 Public exploit

    Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

    Mage mage-ai
  • Critical 9.4
    CVE-2026-104480

    Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership

    Discord libdave before 1.2.0 did not reject an MLS Welcome message when the resulting group roster contained an unrecognized participant. An attacker in control of the DAVE signaling path (the voice gateway, or an equivalent position able to add, alter, or wi…

    Discord libdave
  • Critical 9.1
    CVE-2026-53434

    Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector

    Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users ar…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven
  • Critical 9.8
    CVE-2026-52989

    nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

    In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Currently, when nvmet_tcp_build_pdu_iovec() detects an out-of-bounds PDU length or offset, it triggers nvmet_tcp_fatal_e…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-43493

    crypto: pcrypt - Fix handling of MAY_BACKLOG requests

    In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix handling of MAY_BACKLOG requests MAY_BACKLOG requests can return EBUSY. Handle them by checking for that value and filtering out EINPROGRESS notifications.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 10.0
    CVE-2021-40391

    An out-of-bounds write vulnerability exists in the drill format T-code tool number functionality of Gerbv 2.7.0, dev (c…

    gerbv gerbv Debian Ubuntu