Skip to content
OpenAdvisories

Weakness (CWE)

CWE-755: Improper Handling of Exceptional Conditions

Class Incomplete Mapping discouraged

The product does not handle or incorrectly handles an exceptional condition.

Source: MITRE CWE-755

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.2
    CVE-2026-109619 Exploited Public exploit EPSS 100%

    RCE via stale global state

    PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being reset. The global state may then refer to request memory even after it has been freed. Subs…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
    KEV Oct 26, 2026
  • Critical 9.2
    CVE-2026-109618 Exploited Public exploit EPSS 100%

    RCE via OOM corruption

    PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of the request. Some contexts may not properly account for this scenario and leave request memory in an uninitialized state before performing an allocation. The s…

    PHP Group PHP php5 php7.0 Debian Ubuntu Alpine
    KEV Oct 26, 2026
  • High 8.8
    CVE-2021-38003 Exploited Public exploit EPSS 39%

    Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially expl…

    Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine
    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2020-7247 Exploited Public exploit EPSS 99%

    smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to…

    opensmtpd opensmtpd opensmtpd Debian Ubuntu Alpine
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2017-5638 Exploited · Ransomware Public exploit EPSS 100%

    Apache Struts vulnerable to remote arbitrary command execution due to improper input validation

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows remote attackers to execute arbitrary commands via a crafted …

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
    KEV Nov 3, 2021