cve.bz

CWE-237: Improper Handling of Structural Elements

Filter

The product does not handle or incorrectly handles inputs that are related to complex structures.

What the weakness is: CWE-237 at MITRE. All weaknesses

Ask an AI about CWE-237

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-237: Improper Handling of Structural Elements and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/237.html and https://cve.bz/cve/cwe/237?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.1CVE-2026-120386EPSS 0.2%

    Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash.

  2. 9.8CVE-2026-45411EPSS 0.6%

    vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.3, it is possible to catch a host exception using the yield* expression inside an async generator. When the generator is closed using the return function, the value is awaited on …

  3. 3.3CVE-2025-24336EPSS 0.2%

    SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed.

  4. 5.5CVE-2023-6110EPSS 0.5%

    A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules which are not associated with any application credentials.

  5. 7.5CVE-2023-34429EPSS 0.7%

    Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.