A10:2025 — Mishandling of Exceptional Conditions
Verified by Precogs Threat Research
What is Mishandling of Exceptional Conditions (OWASP A10:2025)?
NEW in 2025. Emphasizes the importance of secure error handling and resilience. Weak or missing error handling can expose critical vulnerabilities: unhandled exceptions revealing stack traces, assertions that can be bypassed, error conditions that leave systems in insecure states, and resource cleanup failures during exceptions.
Impact
New category recognizing that error handling is a systemic security concern. Improper exception handling has been a contributing factor in multiple high-profile breaches where systems entered insecure states during error conditions.
How Precogs AI Addresses A10
Precogs AI detects missing error handling paths in compiled binaries and source code, identifying where exceptions can leave systems in insecure states or expose sensitive information.