CWE-159Improper Handling of Invalid Use of Special Elements

Abstraction: Class · CVEs in our corpus: 13

The product does not properly filter, remove, quote, or otherwise manage the invalid use of special elements in user-controlled input, which could cause adverse effect on its behavior and integrity.

Last updated: 20 August 2026 13:14 UTC

OWASP Top 10 for Web (2025)

This weakness contributes to A05:2025 Injection.

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2019-9505`	7.8	9.8	0.0345	2019-05-08
`CVE-2020-1653`	6.2	7.5	0.0159	2020-07-17
`CVE-2020-1648`	6.1	7.5	0.0128	2020-07-17
`CVE-2020-1646`	6.0	7.5	0.0101	2020-07-17
`CVE-2021-21707`	5.9	5.3	0.2595	2021-11-29
`CVE-2026-35536`	5.2	7.2	0.0024	2026-04-03
`CVE-2020-29022`	4.6	5.3	0.0080	2021-02-16
`CVE-2021-42375`	4.4	5.5	0.0038	2021-11-15
`CVE-2024-51500`	4.4	5.3	0.0042	2024-11-04
`CVE-2026-2636`	4.4	5.5	0.0041	2026-02-25
`CVE-2026-29106`	4.2	5.9	0.0015	2026-03-19
`CVE-2025-61984`	3.0	3.6	0.0027	2025-10-06