CWE-75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Abstraction: Class · CVEs in our corpus: 36

The product does not adequately filter user-controlled input for special elements with control implications.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 1 framework(s): CAPEC 2 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.PS-06
SI-10 Information Input Validation

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

—

Validate

Prove the fix (OWASP ASVS)

—

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2021-22911`	9.9	9.8	0.9524	2021-05-27
`CVE-2021-22910`	7.7	9.8	0.0226	2021-08-09
`CVE-2023-40743`	7.7	9.8	0.0256	2023-09-05
`CVE-2024-0801`	7.7	7.5	0.4184	2024-03-13
`CVE-2026-29042`	7.7	9.8	0.0233	2026-03-06
`CVE-2024-35373`	7.5	9.8	0.0118	2024-05-24
`CVE-2024-39227`	7.5	9.8	0.0119	2024-08-06
`CVE-2025-50213`	7.4	9.8	0.0057	2025-06-24
`CVE-2024-39243`	7.3	9.8	0.0049	2024-06-26
`CVE-2021-39174`	7.1	8.8	0.0389	2021-08-28
`CVE-2023-27533`	6.9	8.8	0.0199	2023-03-30
`CVE-2026-31908`	6.9	9.1	0.0052	2026-04-14
`CVE-2024-37779`	6.8	8.8	0.0110	2024-09-23
`CVE-2024-27708`	6.8	9.6	0.0060	2025-12-22
`CVE-2022-24039`	6.7	9.0	0.0191	2022-05-10
`CVE-2023-23912`	6.7	8.8	0.0089	2023-02-09
`CVE-2024-31809`	6.7	8.8	0.0098	2024-04-08
`CVE-2024-58362`	6.5	8.8	0.0037	2026-07-18
`CVE-2022-48217`	6.2	8.1	0.0074	2023-01-04
`CVE-2026-54771`	6.0	8.1	0.0028	2026-07-10
`CVE-2023-0302`	5.8	7.8	0.0037	2023-01-15
`CVE-2024-27622`	5.8	7.2	0.0200	2024-03-05
`CVE-2024-23268`	5.8	7.8	0.0042	2024-03-08
`CVE-2024-23274`	5.8	7.8	0.0042	2024-03-08
`CVE-2024-24257`	5.8	7.5	0.0039	2024-07-26