Common Weakness Enumeration

    CWE Definition / CWE-396

    CWE-396: Declaration of Catch for Generic Exception

    Catching overly broad exceptions promotes complex error handling code that is more likely to contain security vulnerabilities.

    Published:19 Jul 2006
    Organization:MITRE
    Modified:28 Oct 2026

    Related Weakness

    CWE-705: Incorrect Control Flow Scoping

    CWE-755: Improper Handling of Exceptional Conditions

    CWE-221: Information Loss or Omission