CWE-167 · Injection and Smuggling
Improper Handling of Additional Special Element
5CVEs
SortMost likely exploited
5 CVEs with CWE-167 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-25006Microsoft Exchange Server Spoofing VulnerabilityMicrosoft · Microsoft Exchange Server 2016 Cumulative Update 23 · CVSS 5.3 · 2025-08-12 | 5.3 | 1.0% | 2025-08-12 |
| CVE-2023-4809pf incorrectly handles multiple IPv6 fragment headersFreeBSD · FreeBSD · 2023-09-06 | – | 0.8% | 2023-09-06 |
| CVE-2023-3580Improper Handling of Additional Special Element in squidex/squidexsquidex · squidex/squidex · CVSS 5.4 · 2023-07-10 | 5.4 | 0.6% | 2023-07-10 |
| CVE-2023-0643Improper Handling of Additional Special Element in squidex/squidexsquidex · squidex/squidex · CVSS 5.4 · 2023-02-02 | 5.4 | 0.6% | 2023-02-02 |
| CVE-2025-30656Junos OS: MX Series, SRX Series: Processing of specific SIP INVITE messages by the SIP ALG will lead to an FPC crashJuniper Networks · Junos OS · CVSS 7.5 · 2025-04-09 | 7.5 | 0.4% | 2025-04-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.