Skip to content
OpenAdvisories

Weakness (CWE)

CWE-460: Improper Cleanup on Thrown Exception

Base Draft

The product does not clean up its state or incorrectly cleans up its state when an exception is thrown.

How to prevent it (1 mitigation)

  1. Implementation

    If one breaks from a loop or function by throwing an exception, make sure that cleanup happens or that you should exit the program. Use throwing exceptions sparsely.

Source: MITRE CWE-460

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-31650 Public exploit EPSS 61%

    Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame

    Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOf…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat10 Debian Ubuntu Maven