cve.bz

CWE-221: Information Loss or Omission

Filter

The product does not record, or improperly records, security-relevant information that leads to an incorrect decision or hampers later analysis.

What the weakness is: CWE-221 at MITRE. OWASP Top 10: A09:2025 Logging & Alerting Failures

Related attack patterns (CAPEC): 1
  • CAPEC-81 Web Server Logs Tampering Likelihood: Medium · Severity: High

The attack patterns MITRE's CAPEC relates to CWE-221, as MITRE names them. Credits.

Ask an AI about CWE-221

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-221: Information Loss or Omission and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/221.html and https://cve.bz/cve/cwe/221?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-121134EPSS 0.2%

    Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

  2. 4.3CVE-2026-76027EPSS 0.2%

    Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

  3. 8.8CVE-2026-113238EPSS 0.4%

    Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

  4. 8.8CVE-2026-113108EPSS 0.4%

    Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

  5. 6.5CVE-2026-113026EPSS 0.4%

    Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

  6. 4.3CVE-2026-106287EPSS 0.2%

    Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Low)

  7. 6.5CVE-2026-87535EPSS 0.3%

    Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

  8. 5.0CVE-2025-62306EPSS 0.3%

    HCL IntelliOps Event Management (IEM) is affected by information omission. The lack of information breaks auditability and observability of a workflow. if an attacker were to gain access to the application, the insufficient logging could h…