Cyber Posture

CWE · MITRE source

CWE-395Use of NullPointerException Catch to Detect NULL Pointer Dereference

Abstraction: Base · CVEs in our corpus: 17

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

Programmers typically catch NullPointerException under three circumstances: Of these three circumstances, only the last is acceptable.

Last updated: 09 May 2026 03:25 UTC

NIST 800-53 r5 controls that address this weakness (0)AI

Control Title Family Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE Risk CVSS EPSS Published
CVE-2025-274662.09.80.00032025-09-11
CVE-2025-581422.09.80.00032025-09-11
CVE-2022-28321.57.50.00782022-08-16
CVE-2025-155141.57.50.00092026-01-12
CVE-2022-295081.36.30.00102023-05-10
CVE-2024-276581.36.50.00042024-02-29
CVE-2024-276591.36.50.00042024-02-29
CVE-2024-276611.36.50.00042024-02-29
CVE-2024-276621.36.50.00042024-02-29
CVE-2022-428791.26.10.00062023-11-14
CVE-2023-239041.26.10.00052024-09-16
CVE-2024-362751.26.10.00012024-11-13
CVE-2023-250711.15.60.00072023-11-14
CVE-2023-410820.94.40.00062024-05-16
CVE-2023-487270.73.30.00042024-05-16
CVE-2022-428780.62.80.00112023-05-10
CVE-2024-280300.42.20.00042024-11-13