CWE · MITRE source
CWE-460Improper Cleanup on Thrown Exception
The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.
Often, when functions or loops become complicated, some level of resource cleanup is needed throughout execution. Exceptions can disturb the flow of the code and prevent the necessary cleanup from happening.
Last updated: 04 July 2026 11:13 UTC
Cumulative inbound coverage
How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.
Collective: full · 1 mapping(s) from 1 framework(s): OWASP-Web 1 (full)
OWASP Top 10 for Web (2025)
This weakness contributes to A10:2025 Mishandling of Exceptional Conditions.
NIST 800-53 r5 controls that address this weakness (0)AI
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2022-22150 | 5.5 | 8.8 | 0.0180 | 2022-02-04 |
CVE-2022-4744 | 5.5 | 7.8 | 0.0046 | 2023-03-30 |
CVE-2023-46393 | 5.5 | 7.5 | 0.0045 | 2023-10-27 |
CVE-2026-40583 | 5.5 | 8.2 | 0.0038 | 2026-04-21 |
CVE-2017-15127 | 3.5 | 5.5 | 0.0038 | 2018-01-14 |
CVE-2016-9592 | 3.5 | 4.3 | 0.0131 | 2018-04-16 |
CVE-2017-9657 | 3.5 | 6.5 | 0.0079 | 2018-04-30 |
CVE-2019-14891 | 3.5 | 5.0 | 0.0069 | 2019-11-25 |
CVE-2020-14304 | 3.5 | 4.4 | 0.0036 | 2020-09-15 |
CVE-2021-34716 | 3.5 | 6.7 | 0.0239 | 2021-08-18 |
CVE-2022-3707 | 3.5 | 5.5 | 0.0022 | 2023-03-06 |
CVE-2024-0316 | 3.5 | 6.8 | 0.0032 | 2024-01-15 |
CVE-2024-20354 UPD | 3.5 | 4.7 | 0.0029 | 2024-03-27 |
CVE-2024-12289 | 3.5 | 5.9 | 0.0037 | 2024-12-12 |
CVE-2025-30157 | 3.5 | 6.5 | 0.0041 | 2025-03-21 |
CVE-2025-32439 | 3.5 | 6.5 | 0.0031 | 2025-04-15 |
CVE-2025-69652 | 3.5 | 6.2 | 0.0017 | 2026-03-06 |
CVE-2026-20118 | 3.5 | 6.8 | 0.0032 | 2026-03-11 |
CVE-2026-33481 | 3.5 | 5.3 | 0.0041 | 2026-03-26 |
CVE-2022-3301 | 1.5 | 2.4 | 0.0054 | 2022-09-26 |
CVE-2025-59399 | 1.5 | 3.1 | 0.0016 | 2025-09-15 |
CVE-2026-48524 UPD | 1.5 | 3.7 | 0.0022 | 2026-05-28 |