CWE · MITRE source
CWE-150Improper Neutralization of Escape, Meta, or Control Sequences
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as escape, meta, or control character sequences when they are sent to a downstream component.
Last updated: 15 October 2026 20:36 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
—
—
V1.2.10V1.3.12
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2017-0899 UPD | 8.2 | 9.8 | 0.1110 | 2017-08-31 |
CVE-2020-6932 UPD | 7.9 | 10.0 | 0.0359 | 2020-08-12 |
CVE-2022-30123 UPD | 7.7 | 10.0 | 0.0196 | 2022-12-05 |
CVE-2023-3265 UPD | 7.6 | 9.8 | 0.0162 | 2023-08-14 |
CVE-2025-55754 UPD | 7.6 | 9.6 | 0.1017 | 2025-10-27 |
CVE-2025-25286 UPD | 7.5 | 9.8 | 0.0102 | 2025-02-13 |
CVE-2026-25996 UPD | 7.4 | 9.8 | 0.0080 | 2026-02-12 |
CVE-2026-11362 UPD | 7.3 | 9.8 | 0.0045 | 2026-06-05 |
CVE-2021-25310 UPD | 7.2 | 8.8 | 0.0463 | 2021-02-02 |
CVE-2023-26055 UPD | 7.2 | 9.9 | 0.0116 | 2023-03-02 |
CVE-2025-47284 UPD | 7.0 | 9.9 | 0.0047 | 2025-05-19 |
CVE-2026-9270 UPD | 6.9 | 9.1 | 0.0054 | 2026-06-05 |
CVE-2026-50638 UPD | 6.9 | 9.1 | 0.0055 | 2026-06-10 |
CVE-2026-11373 | 6.9 | 9.1 | 0.0057 | 2026-06-22 |
CVE-2023-28446 UPD | 6.8 | 8.8 | 0.0113 | 2023-03-24 |
CVE-2024-32986 UPD | 6.8 | 9.6 | 0.0068 | 2024-05-03 |
CVE-2026-62948 | 6.8 | 9.6 | 0.0058 | 2026-07-15 |
CVE-2024-27936 UPD | 6.7 | 8.8 | 0.0094 | 2024-03-21 |
CVE-2024-52005 UPD | 6.6 | 8.8 | 0.0051 | 2025-01-15 |
CVE-2025-0975 UPD | 6.6 | 8.8 | 0.0068 | 2025-02-28 |
CVE-2026-26149 UPD | 6.5 | 9.0 | 0.0077 | 2026-04-14 |
CVE-2026-19591 | 6.5 | 8.8 | 0.0031 | 2026-09-01 |
CVE-2026-50637 UPD | 6.3 | 8.2 | 0.0050 | 2026-06-10 |
CVE-2026-46720 UPD | 6.2 | 8.2 | 0.0042 | 2026-05-17 |
CVE-2024-56201 UPD | 6.1 | 8.8 | 0.0031 | 2024-12-23 |