CWE · MITRE source
CWE-241Improper Handling of Unexpected Data Type
The product does not handle or incorrectly handles when a particular element is not the expected type, e.g. it expects a digit (0-9) but is provided with a letter (A-Z).
Last updated: 15 October 2026 14:21 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
—
Validate
Prove the fix (OWASP ASVS)
—
NIST 800-53 r5 controls PROPOSED for this weakness (0)AI-assisted
These are model PROPOSALS, not graded mappings. They come
from controls_to_cwe_proposals, which carries no grade field at
all; across the CWE pages 1,540 of 1,722 such associations (89%) have never
been graded by anything. The heading said “address” until
2026-09-29, which asserted a relationship the data does not carry.
Graded cross-walks are on the framework map, not here.
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2023-30591 UPD | 8.1 | 7.5 | 0.5869 | 2023-09-29 |
CVE-2022-29181 UPD | 6.7 | 8.2 | 0.0323 | 2022-05-20 |
CVE-2021-40116 UPD | 6.5 | 8.6 | 0.0139 | 2021-10-27 |
CVE-2021-39131 UPD | 6.2 | 7.5 | 0.0189 | 2021-08-17 |
CVE-2022-24668 UPD | 6.1 | 7.5 | 0.0112 | 2022-02-09 |
CVE-2022-39064 UPD | 6.1 | 8.1 | 0.0040 | 2022-10-14 |
CVE-2022-3029 UPD | 6.0 | 7.5 | 0.0094 | 2022-09-13 |
CVE-2022-1642 UPD | 5.9 | 7.5 | 0.0066 | 2022-06-16 |
CVE-2024-21523 UPD | 5.9 | 7.5 | 0.0060 | 2024-07-10 |
CVE-2024-21526 UPD | 5.9 | 7.5 | 0.0057 | 2024-07-10 |
CVE-2025-2268 UPD | 5.9 | 7.5 | 0.0046 | 2025-03-14 |
CVE-2026-73785 | 5.9 | 7.5 | 0.0057 | 2026-09-11 |
CVE-2025-63548 | 5.8 | 7.5 | 0.0033 | 2026-05-01 |
CVE-2021-0242 UPD | 5.1 | 6.5 | 0.0040 | 2021-04-22 |
CVE-2022-39065 UPD | 5.1 | 6.5 | 0.0040 | 2022-10-14 |
CVE-2024-0151 UPD | 5.1 | 6.5 | 0.0045 | 2024-04-24 |
CVE-2026-47110 UPD | 5.1 | 6.5 | 0.0055 | 2026-06-24 |
CVE-2022-22219 UPD | 4.8 | 5.9 | 0.0067 | 2022-10-18 |
CVE-2024-25966 UPD | 4.6 | 5.3 | 0.0092 | 2024-05-14 |
CVE-2023-28961 UPD | 4.5 | 5.8 | 0.0042 | 2023-04-17 |
CVE-2024-9423 UPD | 4.5 | 5.3 | 0.0057 | 2024-10-02 |
CVE-2025-66550 | 4.5 | 5.7 | 0.0034 | 2025-12-05 |
CVE-2023-5215 UPD | 4.4 | 5.3 | 0.0081 | 2023-09-28 |
CVE-2025-1004 UPD | 4.4 | 5.3 | 0.0042 | 2025-02-06 |
CVE-2022-22193 UPD | 4.3 | 5.5 | 0.0024 | 2022-04-14 |