ClassIncomplete

CWE-754Improper Check for Unusual or Exceptional Conditions

Category: other

Description

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

Common consequences· 1

  • Integrity / Availability — DoS: Crash, Exit, or Restart, Unexpected State
    The data which were produced as a result of a function call could be in a bad state upon return. If the return value is not checked, then this bad data may be used in operations, possibly leading to a crash or other unintended behaviors.

Potential mitigations· 5

  • [Requirements]
  • [Implementation]Check the results of all functions that return a value and verify that the value is expected.
  • [Implementation]If using exception handling, catch and throw specific exceptions instead of overly-general exceptions (CWE-396, CWE-397). Catch and handle exceptions as locally as possible so that exceptions do not propagate too far up the call stack (CWE-705). Avoid unchecked or uncaught exceptions where feasible (CWE-248).
  • [Implementation]
  • [Implementation]

References

  1. https://cwe.mitre.org/data/definitions/754.html

(incoming)16

TypeTargetConfidenceTier
VulnerabilityCVE-2025-14322cve-2025-143220%live
VulnerabilityCVE-2025-20093cve-2025-200930%live
VulnerabilityCVE-2025-20198cve-2025-201980%live
VulnerabilityCVE-2025-20200cve-2025-202000%live
VulnerabilityCVE-2025-24975cve-2025-249750%live
VulnerabilityCVE-2025-43715cve-2025-437150%live
VulnerabilityCVE-2025-48581cve-2025-485810%live
VulnerabilityCVE-2026-21693cve-2026-216930%live
VulnerabilityCVE-2026-24054cve-2026-240540%live
VulnerabilityCVE-2026-4687cve-2026-46870%live
VulnerabilityCVE-2026-4689cve-2026-46890%live
VulnerabilityCVE-2026-4690cve-2026-46900%live
VulnerabilityCVE-2026-8091cve-2026-80910%live
KEVEntryApple Multiple Products Kernel Privilege Escalation Vulnerabilitykev-cve-2023-419920%live
KEVEntryApple Multiple Products WebKit Code Execution Vulnerabilitykev-cve-2023-419930%live
KEVEntryPalo Alto Networks PAN-OS Malicious DNS Packet Vulnerabilitykev-cve-2024-33930%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CWE
Improper Check or Handling of Exceptional Conditions
CWE
Improper Handling of Exceptional Conditions
CWE
Improper Handling of Physical or Environmental Conditions
CWE
Inconsistency Between Implementation and Documented Design
CWE
Improper Restriction of Power Consumption
CWE
Incorrect Control Flow Scoping
Sourced from MITRE CWE 4.20. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.