cve.bz

CWE-167: Improper Handling of Additional Special Element

Filter

The product receives input from an upstream component, but it does not handle or incorrectly handles when an additional unexpected special element is provided.

What the weakness is: CWE-167 at MITRE. All weaknesses

Ask an AI about CWE-167

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-167: Improper Handling of Additional Special Element and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/167.html and https://cve.bz/cve/cwe/167?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.3CVE-2025-25006EPSS 0.9%

    Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  2. 8.7CVE-2025-30656EPSS 0.4%

    An Improper Handling of Additional Special Element vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with MS-MPC, MS-MIC and SPC3, and SRX Series, allows an unauthenticated, network-based attacke…

  3. 7.5CVE-2023-4809EPSS 0.8%

    In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately processed. That is, a packet with multiple fragment extension headers would not…

  4. 4.3CVE-2023-3580EPSS 0.6%

    Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.

  5. 6.1CVE-2023-0643EPSS 0.6%

    Improper Handling of Additional Special Element in GitHub repository squidex/squidex prior to 7.4.0.