CWE-166 · Injection and Smuggling
Improper Handling of Missing Special Element
4CVEs
SortMost likely exploited
4 CVEs with CWE-166 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-38091Microsoft WS-Discovery Denial of Service VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 7.5 · 2024-07-09 | 7.5 | 1.9% | 2024-07-09 |
| CVE-2026-21218.NET Spoofing VulnerabilityMicrosoft · .NET 10.0 · CVSS 7.5 · 2026-02-10 | 7.5 | 1.0% | 2026-02-10 |
| CVE-2026-102082Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occursJuniper Networks · Junos OS · CVSS 5.9 · 2026-10-14 | 5.9 | 0.3% | 2026-10-14 |
| CVE-2026-32792Packet of death with DNSCryptNLnet Labs · Unbound · CVSS 4.6 · 2026-05-20 | 4.6 | 0.3% | 2026-05-20 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.