CWE-237 · Input Validation and Logic
Improper Handling of Structural Elements
5CVEs
SortMost likely exploited
5 CVEs with CWE-237 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-34429Weintek Weincloud Improper Handling of Structural ElementsWeintek · Weincloud · CVSS 7.5 · 2023-07-19 | 7.5 | 0.7% | 2023-07-19 |
| CVE-2025-47914Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agentgolang.org/x/crypto · golang.org/x/crypto/ssh/agent · CVSS 5.3 · 2025-11-19 | 5.3 | 0.5% | 2025-11-19 |
| CVE-2023-6110Openstack: deleting a non existing access rule deletes another existing access rule in it's scopeRed Hat · Red Hat OpenStack Platform 17.1 for RHEL 8 · CVSS 5.5 · 2024-11-17 | 5.5 | 0.5% | 2024-11-17 |
| CVE-2026-120386Effekseer improperly validates "effect" files. When a crafted effect file is loaded to the affected runtime, the host process may be forced to crash.Effekseer · Effekseer · CVSS 5.1 · 2026-11-09 | 5.1 | 0.2% | 2026-11-09 |
| CVE-2025-24336SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed.General Incorporated Association OCF · SXF Common Library · CVSS 3.3 · 2025-01-31 | 3.3 | 0.2% | 2025-01-31 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.